spage/.github/workflows/build-aio.yaml

name: Build & Publish All-in-One

on:
  push:
    branches: [main]
    tags: [v*]
  workflow_dispatch:

env:
  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  BIN_NAME: spage
  BIN_OUT: build
  # for Go build
  GO_PKG_ROOT: github.com/LiteyukiStudio/spage
  # for container build
  CONTAINER_PLATFORMS: linux/amd64,linux/arm64,linux/386,linux/arm,linux/ppc64le,linux/s390x
  REG_GHCR: ghcr.io
  REG_DOCKERHUB: docker.io
  REG_LCR: reg.liteyuki.org
  NAMESPACE_GHCR: liteyukistudio
  NAMESPACE_DOCKERHUB: liteyukistudio
  NAMESPACE_LCR: spage
  ARCH_MAP: |
    amd64:amd64-v1
    arm64:arm64
    arm:armv7
    386:386-sse2
    ppc64le:ppc64le
    s390x:s390x
  

concurrency:
  group: "build-aio"
  cancel-in-progress: true

permissions:
  contents: write
  packages: write

jobs:
  frontend:
    name: Build Frontend
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
      - name: Build frontend
        run: |
          cd web-src
          npm install pnpm -g
          pnpm install
          pnpm build

      - name: Upload frontend artifact
        uses: actions/upload-artifact@v4
        with:
          name: web
          path: web-src/out

  backend:
    name: Build Backend
    needs: frontend
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}
      tag: ${{ steps.version.outputs.tag }}
      nightly: ${{ steps.version.outputs.nightly }}
    strategy:
      matrix:
        include:
          - goos: darwin
            goarch: amd64
            goamd64: v1
            output: amd64-v1
          - goos: darwin
            goarch: amd64
            goamd64: v3
            output: amd64-v3
          - goos: darwin
            goarch: arm64
            output: arm64
          - goos: freebsd
            goarch: amd64
            goamd64: v1
            output: amd64-v1
          - goos: freebsd
            goarch: amd64
            goamd64: v3
            output: amd64-v3
          - goos: freebsd
            goarch: arm64
            output: arm64
          - goos: freebsd
            goarch: 386
            output: 386
          - goos: freebsd
            goarch: arm
            output: arm
          - goos: linux
            goarch: amd64
            goamd64: v1
            output: amd64-v1
          - goos: linux
            goarch: amd64
            goamd64: v3
            output: amd64-v3
          - goos: linux
            goarch: arm64
            output: arm64
          - goos: linux
            goarch: 386
            go386: sse2
            output: 386-sse2
          - goos: linux
            goarch: arm
            goarm: 7
            output: armv7
          - goos: linux
            goarch: arm
            goarm: 6
            output: armv6
          - goos: linux
            goarch: arm
            goarm: 5
            output: armv5
          - goos: linux
            goarch: ppc64le
            output: ppc64le
          - goos: linux
            goarch: s390x
            output: s390x
          - goos: windows
            goarch: amd64
            goamd64: v1
            output: amd64-v1
          - goos: windows
            goarch: amd64
            goamd64: v3
            output: amd64-v3
          - goos: windows
            goarch: arm64
            output: arm64
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Go
        uses: actions/setup-go@v5

      - name: Set version/tag
        id: version
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/v* ]]; then
            VERSION="${GITHUB_REF#refs/tags/}"
            TAG="${VERSION}"
            NIGHTLY="false"
          else
            VERSION="${GITHUB_SHA}"
            TAG="nightly"
            NIGHTLY="true"
          fi
          echo "version=${VERSION}" >> $GITHUB_OUTPUT
          echo "tag=${TAG}" >> $GITHUB_OUTPUT
          echo "nightly=${NIGHTLY}" >> $GITHUB_OUTPUT

      - name: Download frontend artifact
        uses: actions/download-artifact@v4
        with:
          name: web
          path: static/dist/

      - name: Build Go binary
        env:
          GOOS: ${{ matrix.goos }}
          GOARCH: ${{ matrix.goarch }}
          GOAMD64: ${{ matrix.goamd64 }}
          GOARM: ${{ matrix.goarm }}
          GO386: ${{ matrix.go386 }}
        run: |
          OUTDIR=${{ env.BIN_OUT }}/linux-${{ matrix.output }}
          if [ "${{ matrix.goos }}" = "windows" ]; then
            OUTDIR=${{ env.BIN_OUT }}/windows-${{ matrix.output }}
          elif [ "${{ matrix.goos }}" = "darwin" ]; then
            OUTDIR=${{ env.BIN_OUT }}/darwin-${{ matrix.output }}
          elif [ "${{ matrix.goos }}" = "freebsd" ]; then
            OUTDIR=${{ env.BIN_OUT }}/freebsd-${{ matrix.output }}
          fi
          mkdir -p $OUTDIR
          OUTNAME=${{ env.BIN_NAME }}
          if [ "${{ matrix.goos }}" = "windows" ]; then
            OUTNAME="${{ env.BIN_NAME }}.exe"
          fi
          go build \
            -trimpath \
            -ldflags "-X '${{ env.GO_PKG_ROOT }}/config.CommitHash=${{ github.sha }}' \
              -X '${{ env.GO_PKG_ROOT }}/config.BuildTime=$(date -u +%Y-%m-%dT%H:%M:%SZ)' \
              -X '${{ env.GO_PKG_ROOT }}/config.Version=${{ steps.version.outputs.version }}'" \
            -o $OUTDIR/$OUTNAME ./cmd/server

      - name: Copy binary for main arch (for Docker buildx)
        if: matrix.goos == 'linux'
        env:
          ARCH_MAP: ${{ env.ARCH_MAP }}
        run: |
          STD_ARCH="${{ matrix.goarch }}"
          OUTDIR=${{ env.BIN_OUT }}/linux-${{ matrix.output }}
          OUTNAME=${{ env.BIN_NAME }}
          # 处理主流架构映射
          while read -r line; do
            key=$(echo "$line" | cut -d: -f1)
            val=$(echo "$line" | cut -d: -f2)
            if [ "$val" = "${{ matrix.output }}" ]; then
              mkdir -p ${{ env.BIN_OUT }}/linux-$key
              cp "$OUTDIR/$OUTNAME" "${{ env.BIN_OUT }}/linux-$key/$OUTNAME" || true
              echo "Copied $OUTDIR/$OUTNAME -> ${{ env.BIN_OUT }}/linux-$key/$OUTNAME"
            fi
          done <<< "${ARCH_MAP}"

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BIN_NAME }}-${{ matrix.goos }}-${{ matrix.output }}
          path: ${{ env.BIN_OUT }}/${{ matrix.goos }}-${{ matrix.output }}/*

  docker:
    name: Build & Push Docker Images
    runs-on: ubuntu-latest
    needs: backend
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Download all linux artifacts for docker
        uses: actions/download-artifact@v4
        with:
          pattern: ${{ env.BIN_NAME }}-linux-*
          path: build/
          merge-multiple: true

      - name: Prepare main arch binaries for Docker buildx
        env:
          ARCH_MAP: ${{ env.ARCH_MAP }}
        run: |
          mkdir -p build/linux-amd64 build/linux-arm64 build/linux-arm build/linux-386 build/linux-ppc64le build/linux-s390x
          for line in $(echo "${ARCH_MAP}"); do
            key=$(echo "$line" | cut -d: -f1)
            val=$(echo "$line" | cut -d: -f2)
            src="build/${{ env.BIN_NAME }}-linux-$val"
            dst="build/linux-$key/${{ env.BIN_NAME }}"
            if [ -f "$src" ]; then
              cp "$src" "$dst"
              echo "Copied $src -> $dst"
            else
              echo "Warning: $src not found, skip $key"
            fi
          done
          ls -lhR build/

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REG_GHCR }}
          username: ${{ secrets.GHCR_USER }}
          password: ${{ secrets.GHCR_TOKEN }}

      - name: Login to DockerHub
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REG_DOCKERHUB }}
          username: ${{ secrets.DOCKERHUB_USER }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Login to LCR
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REG_LCR }}
          username: ${{ secrets.LITEYUKIREG_USER }}
          password: ${{ secrets.LITEYUKIREG_TOKEN }}

      - name: Build & Push Docker Images (tag & latest)
        if: ${{ needs.backend.outputs.nightly == 'false' }}
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: |
            ${{ env.NAMESPACE_DOCKERHUB }}/${{ env.BIN_NAME }}:${{ needs.backend.outputs.tag }}
            ${{ env.NAMESPACE_DOCKERHUB }}/${{ env.BIN_NAME }}:latest
            ${{ env.NAMESPACE_DOCKERHUB }}/${{ env.BIN_NAME }}:nightly
            ${{ env.REG_GHCR }}/${{ env.NAMESPACE_GHCR }}/${{ env.BIN_NAME }}:${{ needs.backend.outputs.tag }}
            ${{ env.REG_GHCR }}/${{ env.NAMESPACE_GHCR }}/${{ env.BIN_NAME }}:latest
            ${{ env.REG_GHCR }}/${{ env.NAMESPACE_GHCR }}/${{ env.BIN_NAME }}:nightly
            ${{ env.REG_LCR }}/${{ env.NAMESPACE_LCR }}/${{ env.BIN_NAME }}:${{ needs.backend.outputs.tag }}
            ${{ env.REG_LCR }}/${{ env.NAMESPACE_LCR }}/${{ env.BIN_NAME }}:latest
            ${{ env.REG_LCR }}/${{ env.NAMESPACE_LCR }}/${{ env.BIN_NAME }}:nightly
          platforms: ${{ env.CONTAINER_PLATFORMS }}

      - name: Build & Push Docker Images (nightly only)
        if: ${{ needs.backend.outputs.nightly == 'true' }}
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: |
            ${{ env.NAMESPACE_DOCKERHUB }}/${{ env.BIN_NAME }}:nightly
            ${{ env.REG_GHCR }}/${{ env.NAMESPACE_GHCR }}/${{ env.BIN_NAME }}:nightly
            ${{ env.REG_LCR }}/${{ env.NAMESPACE_LCR }}/${{ env.BIN_NAME }}:nightly
          platforms: ${{ env.CONTAINER_PLATFORMS }}

  release:
    name: Publish GitHub Release
    runs-on: ubuntu-latest
    needs: backend
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Download all artifacts for release
        uses: actions/download-artifact@v4
        with:
          pattern: |
            ${{ env.BIN_NAME }}-*
          path: bin/
          merge-multiple: true

      - name: Publish GitHub Release
        if: ${{ needs.backend.outputs.nightly == 'false' }}
        uses: softprops/action-gh-release@v2.3.0
        with:
          tag_name: ${{ needs.backend.outputs.tag }}
          name: Release ${{ needs.backend.outputs.tag }}
          body: |
            Release ${{ needs.backend.outputs.tag }}
            Built from tag ${{ needs.backend.outputs.tag }}
          files: bin/**