ci: use registry push/pull pattern like gitlab ci

Author: camille-004

.github/workflows/ci.yml

@@ -54,35 +54,47 @@ jobs:
     timeout-minutes: 30
     needs: check-changes
     if: needs.check-changes.outputs.source-changed == 'true'
+    outputs:
+      image-tag: ${{ steps.meta.outputs.tags }}
+      image-digest: ${{ steps.build.outputs.digest }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build CI image
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}/ci
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=sha,prefix={{branch}}-
+            type=raw,value={{branch}}-{{workflow}}-{{run_id}}
+
+      - name: Build and push CI image
+        id: build
         timeout-minutes: 20
         uses: docker/build-push-action@v6
         with:
           context: .
           file: ./Dockerfile.ci
-          tags: cutile-ci:${{ github.sha }}
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          load: true
-          outputs: type=docker,compression=zstd
-
-      - name: Export CI image
-        run: |
-          docker save cutile-ci:${{ github.sha }} | gzip > cutile-ci-image.tar.gz
-
-      - name: Upload CI image artifact
-        uses: actions/upload-artifact@v5
-        with:
-          name: ci-image
-          path: cutile-ci-image.tar.gz
-          retention-days: 1
+          outputs: type=registry,compression=zstd
   lint:
     name: Lint
     runs-on: ubuntu-latest
@@ -114,6 +126,11 @@ jobs:
     needs: [check-changes, build-ci-image]
     if: needs.check-changes.outputs.source-changed == 'true'
     timeout-minutes: 30
+    container:
+      image: ${{ fromJSON(needs.build-ci-image.outputs.image-tag)[0] }}
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
     strategy:
       fail-fast: false
       matrix:
@@ -122,24 +139,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v6
 
-      - name: Download CI image
-        uses: actions/download-artifact@v5
-        with:
-          name: ci-image
-
-      - name: Load CI image
-        run: docker load < cutile-ci-image.tar.gz
-
       - name: Build wheel
         timeout-minutes: 15
         run: |
-          docker run --rm -v ${{ github.workspace }}:/workspace -w /workspace \
-            cutile-ci:${{ github.sha }} \
-            bash -c "
-              python${{ matrix.python-version }} -m venv .venv
-              .venv/bin/pip install --upgrade pip build wheel setuptools
-              .venv/bin/python -m build --wheel --outdir dist/
-            "
+          python${{ matrix.python-version }} -m venv .venv
+          .venv/bin/pip install --upgrade pip build wheel setuptools
+          .venv/bin/python -m build --wheel --outdir dist/
 
       - name: Upload wheel artifact
         uses: actions/upload-artifact@v5
@@ -154,34 +159,29 @@ jobs:
     needs: [check-changes, build-ci-image, build-wheel]
     if: always() && (needs.check-changes.outputs.source-changed == 'true' || needs.check-changes.outputs.docs-changed == 'true')
     timeout-minutes: 15
+    container:
+      image: ${{ fromJSON(needs.build-ci-image.outputs.image-tag)[0] }}
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
 
-      - name: Download CI image
-        uses: actions/download-artifact@v5
-        with:
-          name: ci-image
-
-      - name: Load CI image
-        run: docker load < cutile-ci-image.tar.gz
-
       - name: Download wheel artifact
         uses: actions/download-artifact@v5
         with:
           name: wheel-linux-x86_64-py3.10
           path: dist/
 
+      - name: Install dependencies
+        run: pip install dist/*.whl
+
       - name: Build documentation
         timeout-minutes: 10
         run: |
-          docker run --rm -v ${{ github.workspace }}:/workspace -w /workspace \
-            cutile-ci:${{ github.sha }} \
-            bash -c "
-              pip install dist/*.whl
-              cd docs
-              timeout 8m make html
-            "
+          cd docs
+          timeout 8m make html
 
       - name: Upload documentation artifact
         uses: actions/upload-artifact@v5