realtime_prebuilt_binaries.yml

on:
  workflow_call:
    inputs:
      platform:
        type: string
        required: false
        default: linux/amd64
      platform_base_image:
        required: false
        type: string
        default: amd64/almalinux:8
        description: The image to use as a base image when building the installer.
      cuda_version:
        required: true
        type: string
        description: The CUDA version used for the build (e.g. 12.3).
      environment:
        type: string
        required: false
      # Dependency sources. All blank by default, which assets.Dockerfile passes
      # through as empty build args, leaving the deps_common.sh pins in effect.
      doca_version:
        required: false
        type: string
        default: ''
        description: DOCA version to install. Blank uses the deps_common.sh default.
      holoscan_version:
        required: false
        type: string
        default: ''
        description: Holoscan SDK version to install. Blank uses the deps_common.sh default.
      hsb_repo:
        required: false
        type: string
        default: ''
        description: Holoscan Sensor Bridge repository to clone. Blank uses the deps_common.sh default. Must be clonable without credentials.
      hsb_ref:
        required: false
        type: string
        default: ''
        description: Holoscan Sensor Bridge branch or tag. Blank uses the deps_common.sh default.
      release_tag:
        required: false
        type: string
        default: ''
        description: Draft release tag to attach the installer to.
    secrets:
      DOCKERHUB_USERNAME:
        required: true
      DOCKERHUB_READONLY_TOKEN:
        required: true
      REPO_BOT_ACCESS_TOKEN:
        required: false

name: Pre-built realtime binaries
jobs:
  build_installer:
    name: Build CUDA Quantum Realtime installers
    runs-on: ${{ (contains(inputs.platform, 'arm') && 'linux-arm64-cpu32') || 'linux-amd64-cpu32' }}
    permissions:
      contents: read
      packages: read
    outputs:
      image_hash: ghcr.io/nvidia/cuda-quantum-realtime-assets-${{ inputs.platform }}-cu${{ inputs.cuda_version }}
      artifact_name: cuda-quantum-realtime-assets-${{ inputs.platform }}-cu${{ inputs.cuda_version }}
    services:
      registry:
        image: registry:2
        ports:
          - 5000:5000
    steps:
    # realtime/ uses no submodules.
    - name: Checkout repository
      uses: actions/checkout@v6

    - name: Log in to DockerHub
      uses: docker/login-action@v4
      with:
        username: ${{ secrets.DOCKERHUB_USERNAME }}
        password: ${{ secrets.DOCKERHUB_READONLY_TOKEN }}

    - name: Login to GitHub CR
      uses: docker/login-action@v4
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ github.token }}
    - name: Set up context for buildx
      run: |
        docker context create builder_context

    - name: Set up buildx runner
      uses: docker/setup-buildx-action@v4
      with:
        endpoint: builder_context
        version: v0.19.0
        buildkitd-config: /etc/buildkit/buildkitd.toml # hard-coded to run on our runners
        driver-opts: |
          network=host
          image=moby/buildkit:v0.19.0
    - name: Build assets
      id: docker_build
      uses: docker/build-push-action@v7
      env:
        DOCKER_BUILD_RECORD_UPLOAD: "false"
      with:
        context: .
        file: ./realtime/docker/assets.Dockerfile
        build-args: |
          base_image=${{ (contains(inputs.platform, 'arm') && 'ghcr.io/nvidia/arm64v8/almalinux:8') || 'ghcr.io/nvidia/amd64/almalinux:8' }}  
          cuda_version=${{ inputs.cuda_version }}
          DOCA_VERSION=${{ inputs.doca_version }}
          HOLOSCAN_SDK_VERSION=${{ inputs.holoscan_version }}
          CUDAQ_REALTIME_HSB_REPO=${{ inputs.hsb_repo }}
          CUDAQ_REALTIME_HSB_REF=${{ inputs.hsb_ref }}
        tags: ghcr.io/nvidia/cuda-quantum-realtime-assets-${{ inputs.platform }}-cu${{ inputs.cuda_version }}
        # labels: ${{ steps.metadata.outputs.labels }}
        platforms: ${{ inputs.platform }}
        # TODO: set up cache
        # cache-from: |
        #   ${{ inputs.build_cache }}
        #   ${{ steps.config.outputs.additional_build_caches }}
        # TODO: push to the cache registry
        push: false
        # Output the installer
        outputs: type=local,dest=/tmp/install
    - name: Upload installer
      uses: actions/upload-artifact@v7
      with:
        name: install_cuda_quantum_realtime_cu${{ inputs.cuda_version }}.${{ inputs.platform }}
        path: /tmp/install
        # Validation fetches these from the Deployments run; must outlive it.
        retention-days: 14
        if-no-files-found: error

    - name: Attach installer to draft release
      if: inputs.release_tag != ''
      env:
        GH_TOKEN: ${{ secrets.REPO_BOT_ACCESS_TOKEN }}
        RELEASE_TAG: ${{ inputs.release_tag }}
      run: |
        retry() { for n in 1 2 3; do "$@" && return 0; [ $n -lt 3 ] && sleep $((15*n*n)); done; return 1; }
        retry gh release upload "$RELEASE_TAG" /tmp/install/install_cuda_quantum_realtime* \
          -R ${{ github.repository }} --clobber