container_ci.yml

name: Container CI

on:
  workflow_dispatch:
  pull_request_target:
  push:
    branches:
      - main

jobs:
  ci:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        platform: ["linux/amd64", "linux/arm64/v8", "linux/arm/v7"]
        busybox: ["glibc", "musl", "uclibc"]
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup QEMU
        uses: docker/setup-qemu-action@v3
        with:
          platforms: arm64,arm
      - name: Setup buildx
        uses: docker/setup-buildx-action@v3
      - name: Build container
        uses: docker/build-push-action@v6
        with:
          build-args: PLATFORM=${{ matrix.platform }}
          context: .
          file: ./Dockerfile
          load: true
          push: false
          tags: test-${{ matrix.platform }}-${{ matrix.busybox }}
      - name: Test 
        run: |
          test "$(docker run --rm -i "test-${{ matrix.platform }}-${{ matrix.busybox }}" -c "php -r 'echo shell_exec(\"whoami\");'")" = "nonroot"