tuwunel/.github/workflows/bake.yml

name: Bakery

on:
  workflow_call:
    inputs:
      bake_targets:
        type: string
        description: Bake Matrix
      cargo_profiles:
        type: string
        description: Cargo profiles
      feat_sets:
        type: string
        description: Cargo feature groups
      rust_targets:
        type: string
        description: Rust targets
      rust_toolchains:
        type: string
        description: Rust toolchains
      sys_names:
        type: string
        description: System names
      sys_targets:
        type: string
        description: System targets
      sys_versions:
        type: string
        description: System versions
      machines:
        type: string
        description: Hardware platforms
      excludes:
        type: string
        default: '[]'
        description: Matrix exclusions
      includes:
        type: string
        default: '[]'
        description: Matrix inclusions
      verbose_env:
        type: string
        default: ${{vars.CI_VERBOSE_ENV || false}}
        description: Print the bake environment.
      silent_bake:
        type: string
        default: ${{vars.CI_SILENT_BAKE || false}}
        description: Print as little as possible.
      print_bake:
        type: string
        default: ${{vars.CI_PRINT_BAKE || false}}
        description: Print the computed receipe.
      fail_fast:
        type: boolean
        default: false
        description: Fail-fast for the underlying matrix.
      artifact:
        type: string
        default: '{}'
        description: >
          Map of targets to artifact files to upload. Key is bake target (image prefix),
          value is a JSON object containing keys 'src' and 'dst'. dst is the artifact name,
          src is optional path inside image, defaulting to dst.

jobs:
  bake:
    if: >
      !failure() && !cancelled()
      && fromJSON(inputs.machines)[0] != null
      && fromJSON(inputs.bake_targets)[0] != null

    name: >
      ${{matrix.bake_target}}
      ${{matrix.cargo_profile}}
      ${{matrix.rust_toolchain}}
      ${{matrix.feat_set}}
      ${{matrix.sys_name}}
      ${{matrix.sys_version}}
      ${{matrix.sys_target}}

    runs-on: ${{matrix.machine}}
    strategy:
      fail-fast: ${{inputs.fail_fast}}
      matrix:
        exclude: ${{fromJSON(inputs.excludes)}}
        include: ${{fromJSON(inputs.includes)}}
        bake_target: ${{fromJSON(inputs.bake_targets)}}
        cargo_profile: ${{fromJSON(inputs.cargo_profiles)}}
        feat_set: ${{fromJSON(inputs.feat_sets)}}
        rust_toolchain: ${{fromJSON(inputs.rust_toolchains)}}
        sys_name: ${{fromJSON(inputs.sys_names)}}
        sys_version: ${{fromJSON(inputs.sys_versions)}}
        rust_target: ${{fromJSON(inputs.rust_targets)}}
        sys_target: ${{fromJSON(inputs.sys_targets)}}
        machine: ${{fromJSON(inputs.machines)}}

    steps:
    - uses: actions/checkout@v4
      with:
        persist-credentials: false

    # Call docker
    - name: Bake ${{matrix.bake_target}}
      env:
        bake_target: ${{matrix.bake_target}}
        cargo_profile: ${{matrix.cargo_profile}}
        rust_toolchain: ${{matrix.rust_toolchain}}
        rust_target: ${{matrix.rust_target}}
        feat_set: ${{matrix.feat_set}}
        sys_name: ${{matrix.sys_name}}
        sys_version: ${{matrix.sys_version}}
        sys_target: ${{matrix.sys_target}}
        machine: ${{matrix.machine}}
        acct: ${{github.actor}}
        repo: ${{github.repository}}
        CI_VERBOSE_ENV: ${{inputs.verbose_env}}
        CI_SILENT_BAKE: ${{inputs.silent_bake}}
        CI_PRINT_BAKE: ${{inputs.print_bake}}

      run: |
        docker/bake.sh "${{matrix.bake_target}}"

    # Optionally extract an inner artifact
    - name: Extract Artifact
      if: >
        !failure() && !cancelled()
        && fromJSON(inputs.artifact)[matrix.bake_target].dst
        && fromJSON(inputs.artifact)[matrix.bake_target].img == null

      env:
        iid: ${{matrix.bake_target}}--${{matrix.cargo_profile}}--${{matrix.rust_toolchain}}--${{matrix.rust_target}}--${{matrix.feat_set}}--${{matrix.sys_name}}--${{matrix.sys_version}}--${{matrix.sys_target}}
        dst: ${{ fromJSON(inputs.artifact)[matrix.bake_target].dst }}
        src: ${{ fromJSON(inputs.artifact)[matrix.bake_target].src || fromJSON(inputs.artifact)[matrix.bake_target].dst }}

      run: |
        cid=$(docker create "$iid" /)
        rm -rf _artifact
        mkdir -p "_artifact"
        docker cp "$cid:$src" "_artifact/$dst"

    # Optionally extract the image itself as an artifact.
    - name: Extract Image
      if: >
        !failure() && !cancelled()
        && fromJSON(inputs.artifact)[matrix.bake_target].dst
        && fromJSON(inputs.artifact)[matrix.bake_target].img != null

      env:
        iid: ${{matrix.bake_target}}--${{matrix.cargo_profile}}--${{matrix.rust_toolchain}}--${{matrix.rust_target}}--${{matrix.feat_set}}--${{matrix.sys_name}}--${{matrix.sys_version}}--${{matrix.sys_target}}
        dst: ${{ fromJSON(inputs.artifact)[matrix.bake_target].dst }}

      run: |
        rm -rf _artifact
        mkdir -p "_artifact"
        docker save -o "_artifact/$dst" "$iid"

    # Upload either artifact
    - name: Upload Artifact
      if: >
        !failure() && !cancelled()
        && fromJSON(inputs.artifact)[matrix.bake_target].dst

      uses: actions/upload-artifact@v4
      with:
        path: _artifact/*
        name: ${{matrix.cargo_profile}}-${{matrix.feat_set}}-${{fromJSON(inputs.artifact)[matrix.bake_target].dst}}