xserver/.github/workflows/gentoo-image.yml

name: Build Gentoo deps image

# Builds the prebuilt Gentoo image (.github/docker/gentoo/Dockerfile) with all
# X-server build dependencies baked in, and pushes it to GHCR. The
# xserver-build-gentoo job pulls this image so it only has to run meson (~5 min)
# instead of emerging the whole dependency set (~20 min) on every run.
#
# This is the one intentionally-slow job (it compiles the X-USE variants the
# official binhost lacks: mesa, llvm, ...), but it runs off the PR critical path
# — only on demand, on a weekly schedule, or when the Dockerfile changes.

on:
    workflow_dispatch:
    schedule:
        # weekly, Monday 04:00 UTC — keep the image fresh with the binhost
        - cron: '0 4 * * 1'
    push:
        paths:
            - '.github/docker/gentoo/**'
            - '.github/workflows/gentoo-image.yml'

permissions:
    contents: read
    packages: write

jobs:
    build-gentoo-image:
        runs-on: ubuntu-latest
        timeout-minutes: 300
        steps:
            - uses: actions/checkout@v6

            - name: Log in to GHCR
              run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin

            - name: Build and push image
              run: |
                  set -eux
                  owner=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
                  img="ghcr.io/$owner/xserver-gentoo-deps"
                  docker build \
                      -t "$img:latest" \
                      -t "$img:${GITHUB_SHA::12}" \
                      -f .github/docker/gentoo/Dockerfile \
                      .github/docker/gentoo
                  docker push "$img:latest"
                  docker push "$img:${GITHUB_SHA::12}"