ci (docker.yml): refactor docker build/publish

Author: pythoninthegrass

{{cookiecutter.project_slug}}/.github/workflows/docker.yml

@@ -10,22 +10,20 @@ on:
     paths:
       - 'Dockerfile*'
       - 'pyproject.toml'
-      - 'poetry.lock'
+      - '*.lock'
       - 'requirements.txt'
       - '**.py'
       - '**.sh'
       - '.dockerignore'
       - '.env.example'
       - '.github/workflows/**'
   workflow_dispatch:
-  # workflow_run:
-  #   workflows: ["Run pytest"]
-  #   types:
-  #     - completed
 
 env:
-  REGISTRY_URL: ${{ vars.REGISTRY_URL }}
-  REGISTRY_USER: ${{ vars.REGISTRY_USER }}
+  REGISTRY_URL: ${{ vars.REGISTRY_URL || 'ghcr.io' }}
+  REGISTRY_USER: ${{ vars.REGISTRY_USER || github.repository_owner }}
+  REGISTRY_PASS: ${{ (vars.REGISTRY_URL == 'ghcr.io' || !vars.REGISTRY_URL) && secrets.GITHUB_TOKEN || secrets.REGISTRY_PASS }}
+  IMAGE_NAME: ${{ vars.IMAGE || github.event.repository.name }}
 
 jobs:
   push_to_registry:
@@ -36,7 +34,6 @@ jobs:
       matrix:
         dockerfile: [Dockerfile]
     concurrency:
-      # group: ${{ github.workflow }}-${{ matrix.dockerfile }}-${{ github.event.workflow_run.head_branch || github.ref }}
       group: ${{ github.workflow }}-${{ matrix.dockerfile }}-${{ github.head_ref || github.ref }}
       cancel-in-progress: true
     permissions:
@@ -48,22 +45,6 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Set password by container registry
-        run: |
-          case "${{ env.REGISTRY_URL }}" in
-            "ghcr.io")
-              echo "REGISTRY_PASS=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_ENV
-              ;;
-            *)
-              if [ -n "${{ secrets.REGISTRY_PASS }}" ]; then
-                echo "REGISTRY_PASS=${{ secrets.REGISTRY_PASS }}" >> $GITHUB_ENV
-              else
-                echo "REGISTRY_PASS secret is not set and registry is not recognized. Exiting..."
-                exit 1
-              fi
-              ;;
-          esac
-
       - name: Log into container registry
         if: github.event_name != 'pull_request'
         uses: docker/login-action@v3
@@ -72,23 +53,12 @@ jobs:
           username: ${{ env.REGISTRY_USER }}
           password: ${{ env.REGISTRY_PASS }}
 
-      - name: Set image name
-        id: image_name
-        run: |
-          if [ -n "${{ env.IMAGE }}" ]; then
-            IMAGE="${{ env.IMAGE }}"
-          else
-            IMAGE=$(grep "LABEL org.opencontainers.image.title" Dockerfile | cut -d'"' -f2)
-          fi
-          echo "IMAGE=$IMAGE" >> $GITHUB_OUTPUT
-          echo "IMAGE=$IMAGE" >> $GITHUB_ENV
-
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v5
         with:
           images: |
-            ${{ env.REGISTRY_URL }}/${{ env.REGISTRY_USER }}/${{ steps.image_name.outputs.IMAGE }}
+            ${{ env.REGISTRY_URL }}/${{ env.REGISTRY_USER }}/${{ env.IMAGE_NAME }}
           tags: |
             type=schedule
             type=ref,event=branch
@@ -98,6 +68,7 @@ jobs:
             type=semver,pattern={{major}}
             type=sha
             type=raw,value=latest,enable=${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch || 'main') }}
+          bake-target: docker-metadata-action
 
       - name: Setup QEMU
         uses: docker/setup-qemu-action@v3
@@ -106,12 +77,15 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/bake-action@v6
         with:
-          context: .
-          file: ./${{ matrix.dockerfile }}
+          source: "{{defaultContext}}"
+          files: |
+            ./docker-bake.hcl
+            cwd://${{ steps.meta.outputs.bake-file }}
+          targets: build
           push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=registry,ref=${{ env.REGISTRY_URL }}/${{ env.REGISTRY_USER }}/${{ steps.image_name.outputs.IMAGE }}:buildcache
-          cache-to: type=registry,ref=${{ env.REGISTRY_URL }}/${{ env.REGISTRY_USER }}/${{ steps.image_name.outputs.IMAGE }}:buildcache,mode=max
+          set: |
+            *.tags=${{ env.REGISTRY_URL }}/${{ env.REGISTRY_USER }}/${{ env.IMAGE_NAME }}:latest
+            *.cache-from=type=gha
+            *.cache-to=type=gha,mode=max