options:
  env:
  - 'DOCKER_CLI_EXPERIMENTAL=enabled'
substitutions:
    _SBOM_BUCKET: 'cos-container-sbom-staging' # default value
steps:
# This step is needed to add a new entry to /proc/sys/fs/binfmt_misc. Docker
# uses QEMU user emulation to run arm64 programs on x86 hosts. A QEMU
# interpreter needs to be added to /proc/sys/fs/binfmt_misc to run arm64
# programs.
- name: 'gcr.io/cloud-builders/docker'
  args: ['run', '--privileged', 'linuxkit/binfmt:v0.7']
# The default builder (which appears to be the Docker daemon that implements
# the old, familiar `docker build` behavior) doesn't support the --platform
# flag, so we need to create a new builder.
- name: 'gcr.io/cloud-builders/docker'
  args: ['buildx', 'create', '--name', 'builder']
- name: 'gcr.io/cloud-builders/docker'
  args: ['buildx', 'use', 'builder']
# Images produced in this way do not appear in the Docker image registry shown
# by `docker images`, at least by default. We use the --push flag to push the
# image after building it, because a subsequent `docker push` won't find the
# image locally.
- name: 'gcr.io/cloud-builders/docker'
  args: ['buildx', 'build', '--platform', 'linux/amd64', '--build-arg', 'BUILDKIT_INLINE_CACHE=1', '-f', 'src/cmd/cos_gpu_installer/Dockerfile', '-t', 'gcr.io/${_OUTPUT_PROJECT}/cos-gpu-installer:latest', '-t', 'gcr.io/${_OUTPUT_PROJECT}/cos-gpu-installer:${TAG_NAME}', '--cache-from', 'gcr.io/${_OUTPUT_PROJECT}/cos-gpu-installer:latest', '--push', '.']
- name: 'gcr.io/cloud-builders/docker'
  args: ['pull','gcr.io/${_OUTPUT_PROJECT}/cos-gpu-installer:${TAG_NAME}']
- name: 'gcr.io/louhi-prod-1/louhi-helper-v2@sha256:fbbe0b03e00a783350d06c97e0ac6dbcd0d52e6053fafd14c7a8f3d6725e4517'
  args: ['sbom_scan_image', '--regex', 'gcr\\.io/${_OUTPUT_PROJECT}/cos-gpu-installer:${TAG_NAME}']
artifacts:
  objects:
    location: 'gs://${_SBOM_BUCKET}/cos-gpu-installer/'
    paths: ['/workspace/cos-gpu-installer:${TAG_NAME}_sbom.spdx.json']
timeout: 1800s