Add container versioning on tag release

.github/workflows/antigravity.yml

@@ -2,6 +2,7 @@ name: Antigravity Image
 
 on:
   workflow_dispatch:
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia-antigravity
@@ -27,15 +28,28 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=raw,value=build-${{ github.run_id }}
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
           file: dockerfiles/AntigravityDockerfile
           context: .
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
-            ${{ env.IMAGE }}:build-${{ github.run_id }}
+          build-args: |
+            BASE_IMAGE=ghcr.io/ucb-bar/chia:${{ github.ref_type == 'tag' && github.ref_name || 'latest' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
 

.github/workflows/cacti.yml

@@ -2,6 +2,7 @@ name: Cacti Image
 
 on:
   workflow_dispatch:
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia-cacti
@@ -48,6 +49,18 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=raw,value=build-${{ github.run_id }}
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
@@ -59,9 +72,10 @@ jobs:
           # org PAT already used to clone private repos in the other nightlies.
           secrets: |
             github_cacti_token=${{ secrets.UCB_CHIA_CI }}
-          tags: |
-            ${{ env.IMAGE }}:latest
-            ${{ env.IMAGE }}:build-${{ github.run_id }}
+          build-args: |
+            BASE_IMAGE=ghcr.io/ucb-bar/chia:${{ github.ref_type == 'tag' && github.ref_name || 'latest' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
 

.github/workflows/champsim.yml

@@ -2,6 +2,7 @@ name: ChampSim Image
 
 on:
   workflow_dispatch:
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia-champsim
@@ -45,16 +46,29 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=raw,value=build-${{ github.run_id }}
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
           file: dockerfiles/ChampSimDockerfile
           context: .
           target: champsim-base
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
-            ${{ env.IMAGE }}:build-${{ github.run_id }}
+          tags: ${{ steps.meta.outputs.tags }}
+          build-args: |
+            CHIA_REVISION=${{ github.sha }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
 

.github/workflows/chia-circt.yml

@@ -8,6 +8,7 @@ name: CIRCT Image
 
 on:
   workflow_dispatch:
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia-circt
@@ -33,6 +34,18 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=raw,value=build-${{ github.run_id }}
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
@@ -42,9 +55,10 @@ jobs:
           # build-chia-circt-base.yml should propagate to the next build.
           pull: true
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
-            ${{ env.IMAGE }}:build-${{ github.run_id }}
+          tags: ${{ steps.meta.outputs.tags }}
+          build-args: |
+            CHIA_REVISION=${{ github.sha }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
 

.github/workflows/chia.yml

@@ -2,6 +2,9 @@ name: Chia Image
 
 on:
   workflow_dispatch:
+  # Release builds come through release-images.yml, which orders this ahead of
+  # the images that derive from it; a tag trigger here would race them.
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia
@@ -48,15 +51,28 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=raw,value=build-${{ github.run_id }}
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
           file: dockerfiles/ChiaDockerfile
           context: .
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
-            ${{ env.IMAGE }}:build-${{ github.run_id }}
+          tags: ${{ steps.meta.outputs.tags }}
+          build-args: |
+            CHIA_REVISION=${{ github.sha }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
 

.github/workflows/chipyard.yml

@@ -6,6 +6,7 @@ name: Chipyard Image
 
 on:
   workflow_dispatch:
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia-chisel-build
@@ -51,14 +52,27 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
           file: dockerfiles/ChipyardDockerfile
           context: .
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
+          build-args: |
+            BASE_IMAGE=ghcr.io/ucb-bar/chia:${{ github.ref_type == 'tag' && github.ref_name || 'latest' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           no-cache: true
           # cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           # cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max

.github/workflows/claude-code.yml

@@ -2,6 +2,7 @@ name: ClaudeCode Image
 
 on:
   workflow_dispatch:
+  workflow_call:
 
 env:
   IMAGE: ghcr.io/ucb-bar/chia-claude-code
@@ -27,6 +28,18 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=raw,value=build-${{ github.run_id }}
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
@@ -35,9 +48,10 @@ jobs:
             GIT_AUTH_TOKEN=${{ secrets.UCB_CHIA_CI }}
           context: .
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
-            ${{ env.IMAGE }}:build-${{ github.run_id }}
+          build-args: |
+            BASE_IMAGE=ghcr.io/ucb-bar/chia:${{ github.ref_type == 'tag' && github.ref_name || 'latest' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
           cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
 

.github/workflows/esp.yml

@@ -6,6 +6,7 @@ name: ESP Image
 
 on:
   workflow_dispatch:
+  workflow_call:
   push:
     branches: [esp]
 
@@ -51,14 +52,27 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      # On a tag push this adds the tag verbatim (v1.2.3), so every image
+      # carries the same version string as the released chialoops.
+      - name: Image tags
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=latest
+            type=ref,event=tag
+
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
           file: dockerfiles/EspDockerfile
           context: .
           push: true
-          tags: |
-            ${{ env.IMAGE }}:latest
+          tags: ${{ steps.meta.outputs.tags }}
+          build-args: |
+            CHIA_REVISION=${{ github.sha }}
+          labels: ${{ steps.meta.outputs.labels }}
           no-cache: true
 
       - name: Show runner resources