build-docker-from-tag.yml

name: Build Image from tag
on:
  workflow_call:
    inputs:
      tag_name:
        description: "Tag of an image to built"
        type: string
        required: true
  workflow_dispatch:
    inputs:
      tag_name:
        description: "Tag of an image to built"
        type: string
        required: true
  push:
    tags:
      - core-v**
      - prover-v**
      - contract_verifier-v**

concurrency: docker-build

jobs:
  setup:
    name: Setup
    runs-on: [ubuntu-latest]
    outputs:
      image_tag_suffix: ${{ steps.set.outputs.image_tag_suffix }}
      prover_fri_gpu_key_id: ${{ steps.extract-prover-fri-setup-key-ids.outputs.gpu_short_commit_sha }}
    steps:
      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
      - name: Generate output with git tag
        id: set
        run: |
          git_tag=""
          if [[ -z "${{ inputs.tag_name }}" ]]; then
            git_tag="${GITHUB_REF#refs/*/}"
          else
            git_tag="${{ inputs.tag_name }}"
          fi
          version=$(cut -d "-" -f2 <<< ${git_tag})
          echo "image_tag_suffix=${version}" >> $GITHUB_OUTPUT

      - name: Generate outputs with Prover FRI setup data keys IDs
        id: extract-prover-fri-setup-key-ids
        run: |
          ./prover/extract-setup-data-keys.sh >> $GITHUB_OUTPUT

  build-push-core-images:
    name: Build and push image
    needs: [setup]
    uses: ./.github/workflows/new-build-core-template.yml
    if: contains(github.ref_name, 'core')
    secrets:
      DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
    with:
      image_tag_suffix: ${{ needs.setup.outputs.image_tag_suffix }}
      en_alpha_release: true
      action: "push"

  build-push-tee-prover-images:
    name: Build and push images
    needs: [setup]
    uses: ./.github/workflows/build-tee-prover-template.yml
    if: contains(github.ref_name, 'core')
    secrets:
      DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
      ATTIC_TOKEN: ${{ secrets.ATTIC_TOKEN }}
    with:
      image_tag_suffix: ${{ needs.setup.outputs.image_tag_suffix }}

  build-push-contract-verifier:
    name: Build and push image
    needs: [setup]
    uses: ./.github/workflows/new-build-contract-verifier-template.yml
    if: contains(github.ref_name, 'contract_verifier')
    secrets:
      DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
    with:
      image_tag_suffix: ${{ needs.setup.outputs.image_tag_suffix }}
      action: "push"

  build-push-prover-images:
    name: Build and push image
    needs: [setup]
    uses: ./.github/workflows/new-build-prover-template.yml
    if: contains(github.ref_name, 'prover')
    with:
      image_tag_suffix: ${{ needs.setup.outputs.image_tag_suffix }}
      ERA_BELLMAN_CUDA_RELEASE: ${{ vars.ERA_BELLMAN_CUDA_RELEASE }}
      action: "push"
    secrets:
      DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}

  build-push-witness-generator-image-avx512:
    name: Build and push image
    needs: [setup]
    uses: ./.github/workflows/new-build-witness-generator-template.yml
    if: contains(github.ref_name, 'prover')
    with:
      image_tag_suffix: ${{ needs.setup.outputs.image_tag_suffix }}-avx512
      ERA_BELLMAN_CUDA_RELEASE: ${{ vars.ERA_BELLMAN_CUDA_RELEASE }}
      WITNESS_GENERATOR_RUST_FLAGS: "-Ctarget_feature=+avx512bw,+avx512cd,+avx512dq,+avx512f,+avx512vl"
      action: "push"
    secrets:
      DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}

  build-gar-prover-fri-gpu-and-circuit-prover-gpu-gar:
    name: Build GAR prover FRI GPU
    needs: [setup, build-push-prover-images]
    uses: ./.github/workflows/build-prover-fri-gpu-gar-and-circuit-prover-gpu-gar.yml
    if: contains(github.ref_name, 'prover')
    with:
      setup_keys_id: ${{ needs.setup.outputs.prover_fri_gpu_key_id }}
      image_tag_suffix: ${{ needs.setup.outputs.image_tag_suffix }}
      protocol_version: ${{ needs.build-push-prover-images.outputs.protocol_version }}