workflow update

.github/workflows/docker-image-agent.yml

@@ -1,12 +0,0 @@
-name: Docker Image CI (agent)
-
-on:
-  push:
-    tags: ["*"]
-
-jobs:
-  call-main-workflow:
-    uses: ./.github/workflows/docker-image.yml
-    with:
-      make_args: "agent=1"
-      image_name: ${{ github.repository_owner }}/godoxy-agent

.github/workflows/docker-image-main-old.yml

@@ -1,9 +0,0 @@
-name: Docker Image CI (main)
-
-on:
-  push:
-    tags: ["*"]
-
-jobs:
-  call-main-workflow:
-    uses: ./.github/workflows/docker-image.yml

.github/workflows/docker-image-main.yml

@@ -1,11 +0,0 @@
-name: Docker Image CI (main)
-
-on:
-  push:
-    tags: ["*"]
-
-jobs:
-  call-main-workflow:
-    uses: ./.github/workflows/docker-image.yml
-    with:
-      image_name: ${{ github.repository_owner }}/godoxy

.github/workflows/docker-image-nightly.yml

@@ -0,0 +1,22 @@
+name: Docker Image CI (nightly)
+
+on:
+  push:
+    branches:
+      - "*" # matches every branch that doesn't contain a '/'
+      - "*/*" # matches every branch containing a single '/'
+      - "**" # matches every branch
+      - "!main" # excludes master
+
+jobs:
+  build-nightly:
+    uses: ./.github/workflows/docker-image.yml
+    with:
+      image_name: ${{ github.repository_owner }}/godoxy
+      tag: nightly
+  build-nightly-agent:
+    uses: ./.github/workflows/docker-image.yml
+    with:
+      image_name: ${{ github.repository_owner }}/godoxy-agent
+      tag: nightly
+      agent: true

.github/workflows/docker-image-prod.yml

@@ -0,0 +1,20 @@
+name: Docker Image CI
+
+on:
+  push:
+    tags:
+      - v*
+
+jobs:
+  build-prod:
+    uses: ./.github/workflows/docker-image.yml
+    with:
+      image_name: ${{ github.repository_owner }}/godoxy
+      old_image_name: ${{ github.repository_owner }}/go-proxy
+      tag: latest
+  build-prod-agent:
+    uses: ./.github/workflows/docker-image.yml
+    with:
+      image_name: ${{ github.repository_owner }}/godoxy-agent
+      tag: latest
+      agent: true

.github/workflows/docker-image.yml

@@ -3,25 +3,39 @@ name: Docker Image CI
 on:
   workflow_call:
     inputs:
-      make_args:
+      tag:
-        description: "Arguments to pass to make"
+        required: true
         type: string
-        required: false
-        default: ""
       image_name:
-        description: "Image name"
+        required: true
         type: string
+      old_image_name:
         required: false
-        default: ${{ github.repository }}
+        type: string
+      agent:
+        required: false
+        default: false
+        type: boolean
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ inputs.image_name }}
+  MAKE_ARGS: agent=${{ inputs.agent && '1' || '0' }}
+  DIGEST_PATH: /tmp/digests/${{ inputs.agent && 'agent' || 'main' }}
+  DIGEST_NAME_SUFFIX: ${{ inputs.agent && 'agent' || 'main' }}
 
 jobs:
   build:
-    name: Build multi-platform Docker image
+    strategy:
-    runs-on: ubuntu-22.04
+      fail-fast: false
+      matrix:
+        include:
+          - runner: ubuntu-latest
+            platform: linux/amd64
+          - runner: ubuntu-24.04-arm
+            platform: linux/arm64
+
+    name: Build ${{ matrix.platform }}
+    runs-on: ${{ matrix.runner }}
 
     permissions:
       contents: read
@@ -29,14 +43,6 @@ jobs:
       id-token: write
       attestations: write
 
-    strategy:
-      fail-fast: false
-      matrix:
-        platform:
-          - linux/amd64
-          # - linux/arm/v6
-          # - linux/arm/v7
-          - linux/arm64
     steps:
       - name: Prepare
         run: |
@@ -47,13 +53,15 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          images: ${{ env.REGISTRY }}/${{ inputs.image_name }}
-
+          tags: |
-      - name: Set up QEMU
+            type=raw,value=${{ inputs.tag }},event=branch
-        uses: docker/setup-qemu-action@v3
+            type=ref,event=tag
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+        with:
+          platforms: ${{ matrix.platform }}
 
       - name: Login to registry
         uses: docker/login-action@v3
@@ -68,47 +76,49 @@ jobs:
         with:
           platforms: ${{ matrix.platform }}
           labels: ${{ steps.meta.outputs.labels }}
-          outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
+          outputs: type=image,name=${{ env.REGISTRY }}/${{ inputs.image_name }},push-by-digest=true,name-canonical=true,push=true
           cache-from: type=gha
           cache-to: type=gha,mode=max
           build-args: |
             VERSION=${{ github.ref_name }}
-            MAKE_ARGS=${{ inputs.make_args }}
+            MAKE_ARGS=${{ env.MAKE_ARGS }}
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1
         with:
-          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          subject-name: ${{ env.REGISTRY }}/${{ inputs.image_name }}
           subject-digest: ${{ steps.build.outputs.digest }}
           push-to-registry: true
 
       - name: Export digest
         run: |
-          mkdir -p /tmp/digests
+          mkdir -p ${{ env.DIGEST_PATH }}
           digest="${{ steps.build.outputs.digest }}"
-          touch "/tmp/digests/${digest#sha256:}"
+          touch "${{ env.DIGEST_PATH }}/${digest#sha256:}"
 
       - name: Upload digest
         uses: actions/upload-artifact@v4
         with:
-          name: digests-${{ env.PLATFORM_PAIR }}
+          name: digests-${{ env.PLATFORM_PAIR }}-${{ env.DIGEST_NAME_SUFFIX }}
-          path: /tmp/digests/*
+          path: ${{ env.DIGEST_PATH }}/*
           if-no-files-found: error
           retention-days: 1
+
   merge:
-    runs-on: ubuntu-22.04
+    needs: build
-    needs:
+    runs-on: ubuntu-latest
-      - build
+
     permissions:
       contents: read
       packages: write
       id-token: write
+
     steps:
       - name: Download digests
         uses: actions/download-artifact@v4
         with:
-          path: /tmp/digests
+          path: ${{ env.DIGEST_PATH }}
-          pattern: digests-*
+          pattern: digests-*-${{ env.DIGEST_NAME_SUFFIX }}
           merge-multiple: true
 
       - name: Set up Docker Buildx
@@ -118,7 +128,10 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          images: ${{ env.REGISTRY }}/${{ inputs.image_name }}
+          tags: |
+            type=raw,value=${{ inputs.tag }},event=branch
+            type=ref,event=tag
 
       - name: Login to registry
         uses: docker/login-action@v3
@@ -129,11 +142,21 @@ jobs:
 
       - name: Create manifest list and push
         id: push
-        working-directory: /tmp/digests
+        working-directory: ${{ env.DIGEST_PATH }}
         run: |
           docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-            $(printf '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)
+            $(printf '${{ env.REGISTRY }}/${{ inputs.image_name }}@sha256:%s ' *)
+
+      - name: Old image name
+        if: inputs.old_image_name != ''
+        run: |
+          docker buildx imagetools create -t ${{ env.REGISTRY }}/${{ inputs.old_image_name }}:${{ steps.meta.outputs.version }}\
+            ${{ env.REGISTRY }}/${{ inputs.image_name }}:${{ steps.meta.outputs.version }}
 
       - name: Inspect image
         run: |
-          docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
+          docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ inputs.image_name }}:${{ steps.meta.outputs.version }}
+
+      - name: Inspect image (old)
+        run: |
+          docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ inputs.old_image_name }}:${{ steps.meta.outputs.version }}