ebrains ci jobs

Author: KFilippopolitis

.github/workflows/ebrains.yml

@@ -0,0 +1,26 @@
+name: Mirror to Ebrains
+
+on:
+  push:
+    branches: [master]
+    tags:
+      - "*"
+
+jobs:
+  to_ebrains:
+    runs-on: ubuntu-latest
+    steps:
+      - name: syncmaster
+        uses: wei/git-sync@v3
+        with:
+          source_repo: "Medical-Informatics-Platform/platform-ui"
+          source_branch: "master"
+          destination_repo: "https://ghpusher:${{ secrets.EBRAINS_GITLAB_ACCESS_TOKEN }}@gitlab.ebrains.eu/hbp-mip/platform-ui.git"
+          destination_branch: "master"
+      - name: synctags
+        uses: wei/git-sync@v3
+        with:
+          source_repo: "Medical-Informatics-Platform/platform-ui"
+          source_branch: "refs/tags/*"
+          destination_repo: "https://ghpusher:${{ secrets.EBRAINS_GITLAB_ACCESS_TOKEN }}@gitlab.ebrains.eu/hbp-mip/platform-ui.git"
+          destination_branch: "refs/tags/*"

.github/workflows/publish_images.yml

@@ -0,0 +1,86 @@
+name: Publish images
+
+on:
+  release:
+    types: [published]
+
+env:
+  HARBOR_REGISTRY: docker-registry.ebrains.eu
+  DOCKER_BUILDKIT: 1
+  DOCKER_CLIENT_TIMEOUT: 300
+  COMPOSE_HTTP_TIMEOUT: 300
+  RETRY_ATTEMPTS: "4"
+  RETRY_SLEEP: "10"
+
+jobs:
+  build_and_push_ui:
+    name: Build PLATFORM-UI image and push to registries
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Harbor connectivity probe
+        run: |
+          set -x
+          getent hosts ${{ env.HARBOR_REGISTRY }} || true
+          curl -vI --connect-timeout 10 https://${{ env.HARBOR_REGISTRY }}/v2/ || true
+
+      - name: Disable IPv6 (job-scoped)
+        run: |
+          sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1
+          sudo sysctl -w net.ipv6.conf.default.disable_ipv6=1
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Log in to EBRAINS HARBOR (retry)
+        run: |
+          for i in $(seq 1 ${{ env.RETRY_ATTEMPTS }}); do
+            echo "${{ secrets.HARBOR_PASSWORD }}" | \
+            docker login ${{ env.HARBOR_REGISTRY }} \
+              -u "${{ secrets.HARBOR_USERNAME }}" --password-stdin && exit 0
+            echo "Harbor login attempt $i failed; retrying in ${{ env.RETRY_SLEEP }}s..."
+            sleep ${{ env.RETRY_SLEEP }}
+          done
+          echo "Harbor login failed after ${{ env.RETRY_ATTEMPTS }} attempts" >&2
+          exit 1
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            hbpmip/platform-ui
+            ${{ env.HARBOR_REGISTRY }}/medical-informatics-platform/platform-ui
+
+      - name: Load PLATFORM-UI service cached image
+        uses: actions/cache@v5
+        with:
+          path: /tmp/.buildx-cache/platform-ui
+          key: ${{ runner.os }}-buildx-platform-ui-${{ hashFiles('Dockerfile', 'nginx.conf.template', 'package.json', 'package-lock.json', 'angular.json', 'src/**', 'public/**') }}
+          restore-keys: |
+            ${{ runner.os }}-buildx-platform-ui-
+
+      - name: Build PLATFORM-UI docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=local,src=/tmp/.buildx-cache/platform-ui
+          cache-to: type=local,dest=/tmp/.buildx-cache-new/platform-ui
+
+      - name: Move Docker images cache
+        run: |
+          rm -rf /tmp/.buildx-cache
+          mv /tmp/.buildx-cache-new /tmp/.buildx-cache

Dockerfile

@@ -3,13 +3,19 @@ FROM node:20-alpine AS build
 WORKDIR /app
 
 # Install dependencies with cache mount for npm cache
-COPY package.json package-lock.json ./
+# Some branches intentionally do not track package-lock.json.
+# Copy whichever npm manifest files exist and install accordingly.
+COPY package*.json ./
 RUN npm config set fetch-retries 10 \
     && npm config set fetch-retry-mintimeout 30000 \
     && npm config set fetch-retry-maxtimeout 300000
 
 RUN --mount=type=cache,target=/root/.npm \
-    npm ci --legacy-peer-deps --no-audit --no-fund --registry=https://registry.npmjs.org/
+    if [ -f package-lock.json ]; then \
+      npm ci --legacy-peer-deps --no-audit --no-fund --registry=https://registry.npmjs.org/; \
+    else \
+      npm install --legacy-peer-deps --no-audit --no-fund --registry=https://registry.npmjs.org/; \
+    fi
 
 
 # Copy source code