ghcr for vector-serve (#225)

ChuckHend · web-flow · commit 01115af4cd50 · 2025-05-05T14:21:24.000-05:00
* ghcr for vector-serve
diff --git a/.github/workflows/build-vector-serve.yml b/.github/workflows/build-vector-serve.yml
@@ -18,6 +18,7 @@ on:
 permissions:
   id-token: write
   contents: read
+  packages: write
 
 defaults:
   run:
@@ -47,11 +48,7 @@ jobs:
 
   build_and_push_amd64:
     name: Build and push AMD64 images
-    runs-on:
-      - "runs-on=${{ github.run_id }}-build-push-amd64"
-      - "runner=large-amd64"
-      - "cpu=8"
-      - "ram=16"
+    runs-on: ubuntu-latest
     outputs:
       short_sha: ${{ steps.versions.outputs.SHORT_SHA }}
     steps:
@@ -64,59 +61,31 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Login to Quay
+      - name: Login to GHCR
         uses: docker/login-action@v2
         with:
-          registry: quay.io/tembo
-          username: ${{ secrets.QUAY_USER_TEMBO }}
-          password: ${{ secrets.QUAY_PASSWORD_TEMBO }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push -- Commit
         run: |
             docker build \
                 -f ./vector-serve/Dockerfile \
-                -t quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64 .
-            docker push quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64
+                -t ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64 .
+            docker push ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64
 
       - name: Build and push -- Release
-        if: github.ref == 'refs/heads/main'
+        # if: github.ref == 'refs/heads/main'
         run: |
             docker build \
                 -f ./vector-serve/Dockerfile \
-                -t quay.io/tembo/vector-serve:latest-amd64 .
-            docker push quay.io/tembo/vector-serve:latest-amd64
-
-      - name: ECR Build and push -- Commit
-        uses: aws-actions/configure-aws-credentials@v4
-        with:
-          role-to-assume: ${{ secrets.GHA_IAM_ROLE }}
-          role-session-name: images-gha-docker-build-and-push
-          aws-region: ${{ secrets.AWS_REGION }}
-
-      - name: Login to Amazon ECR
-        id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
-
-      - name: Build and push
-        uses: docker/build-push-action@v6
-        with:
-          file: ./vector-serve/Dockerfile
-          context: ./
-          platforms: linux/amd64
-          push: true
-          tags: |
-            ${{ secrets.ECR_REGISTRY }}/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache
-          provenance: false
+                -t ghcr.io/chuckhend/vector-serve:latest-amd64 .
+            docker push ghcr.io/chuckhend/vector-serve:latest-amd64
 
   build_and_push_arm64:
     name: Build and push ARM64 images
-    runs-on:
-      - "runs-on=${{ github.run_id }}-build-push-arm64"
-      - "runner=large-arm64"
-      - "cpu=8"
-      - "ram=16"
+    runs-on: ubicloud-standard-2-arm-ubuntu-2204
     outputs:
       short_sha: ${{ steps.versions.outputs.SHORT_SHA }}
     steps:
@@ -130,33 +99,32 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Login to Quay
+      - name: Login to GHCR
         uses: docker/login-action@v2
         with:
-          registry: quay.io/tembo
-          username: ${{ secrets.QUAY_USER_TEMBO }}
-          password: ${{ secrets.QUAY_PASSWORD_TEMBO }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push -- Commit
         run: |
             docker build \
                 -f ./vector-serve/Dockerfile \
                 --platform linux/arm64 \
-                -t quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64 .
-            docker push quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64
+                -t ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64 .
+            docker push ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64
 
       - name: Build and push -- Release
-        if: github.ref == 'refs/heads/main'
+        # if: github.ref == 'refs/heads/main'
         run: |
             docker build \
                 -f ./vector-serve/Dockerfile \
                 --platform linux/arm64 \
-                -t quay.io/tembo/vector-serve:latest-arm64 .
-            docker push quay.io/tembo/vector-serve:latest-arm64
+                -t ghcr.io/chuckhend/vector-serve:latest-arm64 .
+            docker push ghcr.io/chuckhend/vector-serve:latest-arm64
 
   create_manifest:
     name: Create and Push Manifest
-
     runs-on: ubuntu-latest
     needs: [build_and_push_arm64, build_and_push_amd64]
     outputs:
@@ -166,12 +134,12 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Login to Quay
+      - name: Login to GHCR
         uses: docker/login-action@v2
         with:
-          registry: quay.io/tembo
-          username: ${{ secrets.QUAY_USER_TEMBO }}
-          password: ${{ secrets.QUAY_PASSWORD_TEMBO }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -183,23 +151,23 @@ jobs:
       - name: Create and push Docker manifest -- Commit
         run: |
           docker manifest create \
-            quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }} \
-            quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64 \
-            quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64
+            ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }} \
+            ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64 \
+            ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64
 
-          docker manifest annotate quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }} quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64 --arch arm64 --os linux
-          docker manifest annotate quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }} quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64 --arch amd64 --os linux
-          docker manifest push quay.io/tembo/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}
+          docker manifest annotate ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }} ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-arm64 --arch arm64 --os linux
+          docker manifest annotate ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }} ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}-amd64 --arch amd64 --os linux
+          docker manifest push ghcr.io/chuckhend/vector-serve:${{ steps.versions.outputs.SHORT_SHA }}
 
       - name: Create and push Docker manifest -- latest (main)
         # only push latest off main
-        if: github.ref == 'refs/heads/main'
+        # if: github.ref == 'refs/heads/main'
         run: |
           docker manifest create \
-            quay.io/tembo/vector-serve:latest \
-            quay.io/tembo/vector-serve:latest-arm64 \
-            quay.io/tembo/vector-serve:latest-amd64
+            ghcr.io/chuckhend/vector-serve:latest \
+            ghcr.io/chuckhend/vector-serve:latest-arm64 \
+            ghcr.io/chuckhend/vector-serve:latest-amd64
         
-          docker manifest annotate quay.io/tembo/vector-serve:latest quay.io/tembo/vector-serve:latest-arm64 --arch arm64 --os linux
-          docker manifest annotate quay.io/tembo/vector-serve:latest quay.io/tembo/vector-serve:latest-amd64 --arch amd64 --os linux
-          docker manifest push quay.io/tembo/vector-serve:latest
+          docker manifest annotate ghcr.io/chuckhend/vector-serve:latest ghcr.io/chuckhend/vector-serve:latest-arm64 --arch arm64 --os linux
+          docker manifest annotate ghcr.io/chuckhend/vector-serve:latest ghcr.io/chuckhend/vector-serve:latest-amd64 --arch amd64 --os linux
+          docker manifest push ghcr.io/chuckhend/vector-serve:latest
diff --git a/.github/workflows/extension_ci.yml b/.github/workflows/extension_ci.yml
@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-24.04
     services:
       vector-serve:
-        image: quay.io/tembo/vector-serve:latest
+        image: ghcr.io/chuckhend/vector-serve:latest
         ports:
           - 3000:3000
     steps:
@@ -89,7 +89,7 @@ jobs:
     services:
       # Label used to access the service container
       vector-serve:
-        image: quay.io/tembo/vector-serve:latest
+        image: ghcr.io/chuckhend/vector-serve:latest
         ports:
           - 3000:3000
     steps:
diff --git a/.github/workflows/extension_upgrade.yml b/.github/workflows/extension_upgrade.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on:  ubuntu-24.04
     services:
       vector-serve:
-        image: quay.io/tembo/vector-serve:latest
+        image: ghcr.io/chuckhend/vector-serve:latest
         ports:
           - 3000:3000
     steps:
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -25,7 +25,7 @@ cargo pgrx init
 ### 2. Set up Docker container
 
 ```bash
-docker run -d -p 3000:3000 quay.io/tembo/vector-serve:latest
+docker run -d -p 3000:3000 ghcr.io/chuckhend/vector-serve:latest
 ```
 
 Confirm a successful set up by running the following:
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -8,7 +8,7 @@ services:
       - POSTGRES_PASSWORD=postgres
   vector-serve:
     restart: always
-    image: quay.io/tembo/vector-serve:latest
+    image: ghcr.io/chuckhend/vector-serve:latest
     ports:
       - 3000:3000
   ollama-serve:
