feat(ci): push to Gitea container registry

Requires Docker on runner and REGISTRY_TOKEN secret configured.
Pushes to git.prettyhefty.com/bill/ffmpeg-worker with version tags.

.gitea/workflows/release.yml

@@ -5,6 +5,10 @@ on:
     tags:
       - 'v*.*.*'
 
+env:
+  REGISTRY: git.prettyhefty.com
+  IMAGE_NAME: bill/ffmpeg-worker
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -24,7 +28,14 @@ jobs:
         run: $HOME/.local/bin/uv sync
 
       - name: Install FFmpeg
-        run: sudo apt-get update && sudo apt-get install -y ffmpeg
+        run: |
+          if command -v ffmpeg &> /dev/null; then
+            echo "FFmpeg already installed"
+          elif command -v sudo &> /dev/null; then
+            sudo apt-get update && sudo apt-get install -y ffmpeg
+          else
+            apt-get update && apt-get install -y ffmpeg
+          fi
 
       - name: Run tests
         run: $HOME/.local/bin/uv run pytest tests/ -v --ignore=tests/test_integration.py
@@ -37,12 +48,27 @@ jobs:
 
       - name: Extract version from tag
         id: version
-        run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
-
-      - name: Build Docker image
         run: |
-          docker build -t ffmpeg-worker:${{ steps.version.outputs.VERSION }} .
+          VERSION=${GITHUB_REF#refs/tags/}
-          docker tag ffmpeg-worker:${{ steps.version.outputs.VERSION }} ffmpeg-worker:latest
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+          if [[ "$VERSION" == *-alpha* ]] || [[ "$VERSION" == *-beta* ]] || [[ "$VERSION" == *-rc* ]]; then
+            echo "IS_PRERELEASE=true" >> $GITHUB_OUTPUT
+          else
+            echo "IS_PRERELEASE=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Log in to Container Registry
+        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ env.REGISTRY }} -u ${{ gitea.actor }} --password-stdin
+
+      - name: Build and push Docker image
+        run: |
+          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }} .
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }}
+
+          if [ "${{ steps.version.outputs.IS_PRERELEASE }}" = "false" ]; then
+            docker tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.VERSION }} ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+            docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+          fi
 
       - name: List images
         run: docker images | grep ffmpeg-worker

.github/workflows/release.yml

@@ -5,6 +5,10 @@ on:
     tags:
       - 'v*.*.*'
 
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -29,23 +33,38 @@ jobs:
   build:
     needs: test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v4
 
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=latest,enable=${{ !contains(github.ref, '-alpha') && !contains(github.ref, '-beta') && !contains(github.ref, '-rc') }}
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Extract version from tag
+      - name: Build and push Docker image
-        id: version
-        run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
-
-      - name: Build Docker image
         uses: docker/build-push-action@v6
         with:
           context: .
-          push: false
+          push: true
-          tags: |
+          tags: ${{ steps.meta.outputs.tags }}
-            ffmpeg-worker:${{ steps.version.outputs.VERSION }}
+          labels: ${{ steps.meta.outputs.labels }}
-            ffmpeg-worker:latest
           cache-from: type=gha
           cache-to: type=gha,mode=max