Prepare universal workflow

.github/workflows/images_build.yml

@@ -26,6 +26,7 @@ env:
   DOCKER_REPOSITORY: "zabbix"
   LATEST_BRANCH: ${{ github.event.repository.default_branch }}
   BASE_BUILD_NAME: "build-base"
+  MATRIX_FILE: "build.json"
 
 jobs:
   init_build:
@@ -36,6 +37,8 @@ jobs:
       database: ${{ steps.database.outputs.list }}
       components: ${{ steps.components.outputs.list }}
       is_default_branch: ${{ steps.branch_info.outputs.is_default_branch }}
+      current_branch: ${{ steps.branch_info.outputs.current_branch }}
+      branch: ${{ steps.branch_info.outputs.branch }}
     steps:
       - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
         with:
@@ -45,33 +48,35 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 1
+	  sparse-checkout: |
+           ${{ env.MATRIX_FILE }}
 
       - name: Check build.json file
         id: build_exists
         run: |
-            if [[ ! -f "./build.json" ]]; then
+            if [[ ! -f "${{ env.MATRIX_FILE }}" ]]; then
-                echo "::error::File build.json is missing"
+                echo "::error::File ${{ env.MATRIX_FILE }} is missing"
                 exit 1
             fi
 
       - name: Prepare Operating System list
         id: os
         run: |
-            os_list=$(jq -r '.["os-linux"] |  keys | [ .[] | tostring ] | @json' "./build.json")
+            os_list=$(jq -r '.["os-linux"] |  keys | [ .[] | tostring ] | @json' "${{ env.MATRIX_FILE }}")
 
             echo "list=$os_list" >> $GITHUB_OUTPUT
 
       - name: Prepare Platform list
         id: platform_list
         run: |
-            platform_list=$(jq -r '.["os-linux"] | tostring  | @json' "./build.json")
+            platform_list=$(jq -r '.["os-linux"] | tostring  | @json' "${{ env.MATRIX_FILE }}")
 
             echo "list=$platform_list" >> $GITHUB_OUTPUT
 
       - name: Prepare Database engine list
         id: database
         run: |
-            database_list=$(jq -r '[.components | values[] ] | sort | unique | del(.. | select ( . == "" ) ) | [ .[] | tostring ] | @json' "./build.json")
+            database_list=$(jq -r '[.components | values[] ] | sort | unique | del(.. | select ( . == "" ) ) | [ .[] | tostring ] | @json' "${{ env.MATRIX_FILE }}")
 
             echo "list=$database_list" >> $GITHUB_OUTPUT
 
@@ -97,7 +102,9 @@ jobs:
             if [[ "$github_ref" == "${{ env.LATEST_BRANCH }}" ]]; then
                 result=true
             fi
-            echo  "is_default_branch=$result" >> $GITHUB_OUTPUT
+            echo "is_default_branch=$result" >> $GITHUB_OUTPUT
+            echo "current_branch=$github_ref" >> $GITHUB_OUTPUT
+            echo "branch=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT
 
   build_base:
     timeout-minutes: 30
@@ -139,13 +146,29 @@ jobs:
       - name: Prepare Platform list
         id: platform
         run: |
-            platform_list=$(jq -r '.["os-linux"].${{ matrix.os }} | join(",")' "./build.json")
+            platform_list=$(jq -r '.["os-linux"].${{ matrix.os }} | join(",")' "${{ env.MATRIX_FILE }}")
             platform_list="${platform_list%,}"
 
             echo "list=$platform_list" >> $GITHUB_OUTPUT
 
-      - name: Generate tags
+      - name: Generate tags (release)
         id: meta
+        if: ${{ needs.init_build.outputs.current_branch != 'trunk' }}
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.DOCKER_REPOSITORY }}/zabbix-${{ env.BASE_BUILD_NAME }}
+          tags: |
+            type=semver,pattern={{version}},prefix=${{ matrix.os }}-
+            type=semver,pattern={{version}},suffix=-${{ matrix.os }}
+            type=ref,event=branch,prefix=${{ matrix.os }}-,suffix=-latest
+            type=ref,event=branch,suffix=-${{ matrix.os }}-latest
+            type=raw,enable=${{ needs.init_build.outputs.is_default_branch == 'true' }},value=${{matrix.os}}-latest
+          flavor: |
+            latest=${{ (matrix.os == 'alpine') && ( needs.init_build.outputs.is_default_branch == 'true' ) }}
+
+      - name: Generate tags (trunk)
+        id: meta
+        if: ${{ needs.init_build.outputs.current_branch == 'trunk' }}
         uses: docker/metadata-action@v5
         with:
           images: ${{ env.DOCKER_REPOSITORY }}/zabbix-${{ env.BASE_BUILD_NAME }}
@@ -154,231 +177,3 @@ jobs:
             type=ref,event=branch,suffix=-${{ matrix.os }}
           flavor: |
             latest=false
-
-      - name: Build ${{ env.BASE_BUILD_NAME }}/${{ matrix.os }} and push
-        id: docker_build
-        uses: docker/build-push-action@v5
-        with:
-          context: ./Dockerfiles/${{ env.BASE_BUILD_NAME }}/${{ matrix.os }}
-          file: ./Dockerfiles/${{ env.BASE_BUILD_NAME }}/${{ matrix.os }}/Dockerfile
-          platforms: ${{ steps.platform.outputs.list }}
-          push: ${{ secrets.AUTO_PUSH_IMAGES }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: |
-            org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}
-            org.opencontainers.image.created=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
-
-      - name: Image digest
-        run: |
-            echo ${{ steps.docker_build.outputs.digest }}
-            echo "${{ steps.docker_build.outputs.digest }}" > ${{ env.BASE_BUILD_NAME }}_${{ matrix.os }}
-
-      - name: Upload SHA256 tag
-        uses: actions/upload-artifact@v4
-        with:
-         name: ${{ env.BASE_BUILD_NAME }}_${{ matrix.os }}
-         path: ${{ env.BASE_BUILD_NAME }}_${{ matrix.os }}
-         if-no-files-found: error
-
-  build_base_database:
-    timeout-minutes: 180
-    needs: [ "build_base", "init_build"]
-    name: Build ${{ matrix.build }} base on ${{ matrix.os }}
-    strategy:
-      fail-fast: false  
-      matrix:
-        build: ${{ fromJson(needs.init_build.outputs.database) }}
-        os: ${{ fromJson(needs.init_build.outputs.os) }}
-
-    runs-on: ubuntu-latest
-    steps:
-      - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          image: tonistiigi/binfmt:latest
-          platforms: all
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-        with:
-          driver-opts: image=moby/buildkit:master
-
-      - name: Login to DockerHub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
-
-      - name: Prepare Platform list
-        id: platform
-        run: |
-            platform_list=$(jq -r '.["os-linux"].${{ matrix.os }} | join(",")' "./build.json")
-            platform_list="${platform_list%,}"
-
-            echo "list=$platform_list" >> $GITHUB_OUTPUT
-
-      - name: Generate tags
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.DOCKER_REPOSITORY }}/zabbix-${{ matrix.build }}
-          tags: |
-            type=ref,event=branch,prefix=${{ matrix.os }}-
-            type=ref,event=branch,suffix=-${{ matrix.os }}
-          flavor: |
-            latest=false
-
-      - name: Download SHA256 tag  build-base:${{ matrix.os }}
-        uses: actions/download-artifact@v4
-        with:
-          name: build-base_${{ matrix.os }}
-
-      - name: Retrieve build-base:${{ matrix.os }} SHA256 tag
-        id: base_build
-        run: |
-          BASE_TAG=$(cat build-base_${{ matrix.os }})
-          BUILD_BASE_IMAGE=${{ env.DOCKER_REPOSITORY }}/zabbix-build-base@${BASE_TAG}
-
-          echo "base_tag=${BASE_TAG}" >> $GITHUB_OUTPUT
-          echo "base_build_image=${BUILD_BASE_IMAGE}" >> $GITHUB_OUTPUT
-
-      - name: Build ${{ matrix.build }}/${{ matrix.os }} and push
-        id: docker_build
-        uses: docker/build-push-action@v5
-        with:
-          context: ./Dockerfiles/${{ matrix.build }}/${{ matrix.os }}
-          file: ./Dockerfiles/${{ matrix.build }}/${{ matrix.os }}/Dockerfile
-          platforms: ${{ steps.platform.outputs.list }}
-          push: ${{ secrets.AUTO_PUSH_IMAGES }}
-          tags: ${{ steps.meta.outputs.tags }}
-          build-args: BUILD_BASE_IMAGE=${{ steps.base_build.outputs.base_build_image }}
-          labels: |
-            org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}
-            org.opencontainers.image.created=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
-
-      - name: Image digest
-        run: |
-            echo ${{ steps.docker_build.outputs.digest }}
-            echo "${{ steps.docker_build.outputs.digest }}" > ${{ matrix.build }}_${{ matrix.os }}
-
-      - name: Upload SHA256 tag
-        uses: actions/upload-artifact@v4
-        with:
-         name: ${{ matrix.build }}_${{ matrix.os }}
-         path: ${{ matrix.build }}_${{ matrix.os }}
-         if-no-files-found: error
-
-  build_images:
-    timeout-minutes: 90
-    needs: [ "build_base_database", "init_build"]
-    name: Build ${{ matrix.build }} on ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        build: ${{ fromJson(needs.init_build.outputs.components) }}
-        os: ${{ fromJson(needs.init_build.outputs.os) }}
-
-    runs-on: ubuntu-latest
-    steps:
-      - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          image: tonistiigi/binfmt:latest
-          platforms: all
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-        with:
-          driver-opts: image=moby/buildkit:master
-
-      - name: Login to DockerHub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
-
-      - name: Prepare Platform list
-        id: platform
-        run: |
-            # Chromium on Alpine is available only on linux/amd64, linux/arm64 platforms
-            if ([ "${{ matrix.os }}" == "alpine" ] || [ "${{ matrix.os }}" == "centos" ]) && [ "${{ matrix.build }}" == "web-service" ]; then
-                platform_list="linux/amd64,linux/arm64"
-            # Chromium on Ubuntu is not available on s390x platform
-            elif [ "${{ matrix.os }}" == "ubuntu" ] && [ "${{ matrix.build }}" == "web-service" ]; then
-                platform_list="linux/amd64,linux/arm/v7,linux/arm64"
-            else
-                platform_list=$(jq -r '.["os-linux"].${{ matrix.os }} | join(",")' "./build.json")
-            fi
-
-            # Build only Agent and Agent2 on 386
-            if [ "${{ matrix.build }}" != "agent"* ]; then
-                platform_list="${platform_list#linux/386,}"
-            fi
-
-            platform_list="${platform_list%,}"
-
-            echo "list=$platform_list" >> $GITHUB_OUTPUT
-
-      - name: Detect Build Base Image
-        id: build_base_image
-        run: |
-          BUILD_BASE=$(jq -r '.components."${{ matrix.build }}"' "./build.json")
-
-          echo "build_base=${BUILD_BASE}" >> $GITHUB_OUTPUT
-
-      - name: Generate tags
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.DOCKER_REPOSITORY }}/zabbix-${{ matrix.build }}
-          tags: |
-            type=ref,event=branch,prefix=${{ matrix.os }}-
-            type=ref,event=branch,suffix=-${{ matrix.os }}
-          flavor: |
-            latest=false
-
-      - name: Download SHA256 tag for ${{ steps.build_base_image.outputs.build_base }}:${{ matrix.os }}
-        uses: actions/download-artifact@v4
-        if: ${{ matrix.build != 'snmptraps' }}
-        with:
-          name: ${{ steps.build_base_image.outputs.build_base }}_${{ matrix.os }}
-
-      - name: Retrieve ${{ steps.build_base_image.outputs.build_base }}:${{ matrix.os }} SHA256 tag
-        id: base_build
-        if: ${{ matrix.build != 'snmptraps' }}
-        run: |
-          BASE_TAG=$(cat ${{ steps.build_base_image.outputs.build_base }}_${{ matrix.os }})
-          BUILD_BASE_IMAGE=${{ env.DOCKER_REPOSITORY }}/zabbix-${{ steps.build_base_image.outputs.build_base }}@${BASE_TAG}
-
-          echo "base_tag=${BASE_TAG}" >> $GITHUB_OUTPUT
-          echo "base_build_image=${BUILD_BASE_IMAGE}" >> $GITHUB_OUTPUT
-
-      - name: Build ${{ matrix.build }}/${{ matrix.os }} and push
-        id: docker_build
-        uses: docker/build-push-action@v5
-        with:
-          context: ./Dockerfiles/${{ matrix.build }}/${{ matrix.os }}
-          file: ./Dockerfiles/${{ matrix.build }}/${{ matrix.os }}/Dockerfile
-          platforms: ${{ steps.platform.outputs.list }}
-          push: ${{ secrets.AUTO_PUSH_IMAGES }}
-          tags: ${{ steps.meta.outputs.tags }}
-          build-args: BUILD_BASE_IMAGE=${{ steps.base_build.outputs.base_build_image }}
-          labels: |
-            org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}
-            org.opencontainers.image.created=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
-
-      - name: Image digest
-        run: echo ${{ steps.docker_build.outputs.digest }}