Initial commit: TaskPool React panel

- React frontend with route-level code splitting - Backend rebranded from Baihu to TaskPool - DB brand migration script and local compatibility
2026-07-26 08:43:52 +08:00
commit e6956aa001
397 changed files with 73621 additions and 0 deletions
@@ -0,0 +1,184 @@
+name: Build-Base-Image
+
+on:
+  workflow_dispatch:  # 手动触发
+  schedule:
+    - cron: '0 3 * * 0' # 每周日凌晨3点自动构建一次
+  push:
+    branches:
+      - main
+    paths:
+      - 'docker/Dockerfile.base'
+      - 'docker/Dockerfile.debian13.base'
+      - 'docker/Dockerfile.debian13.minimal'
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: taskpool
+
+jobs:
+  build:
+    if: github.event.repository.fork == false
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        base_type: [debian, debian13, minimal]
+        platform:
+          - linux/amd64
+          - linux/arm64
+        include:
+          - base_type: debian
+            platform: linux/amd64
+            dockerfile: docker/Dockerfile.base
+            tag_suffix: ""
+          - base_type: debian
+            platform: linux/arm64
+            dockerfile: docker/Dockerfile.base
+            tag_suffix: ""
+#           - base_type: alpine
+#             platform: linux/amd64
+#             dockerfile: docker/Dockerfile.alpine.base
+#             tag_suffix: "-alpine"
+#           - base_type: alpine
+#             platform: linux/arm64
+#             dockerfile: docker/Dockerfile.alpine.base
+#             tag_suffix: "-alpine"
+          - base_type: debian13
+            platform: linux/amd64
+            dockerfile: docker/Dockerfile.debian13.base
+            tag_suffix: "-debian13"
+          - base_type: debian13
+            platform: linux/arm64
+            dockerfile: docker/Dockerfile.debian13.base
+            tag_suffix: "-debian13"
+          - base_type: minimal
+            platform: linux/amd64
+            dockerfile: docker/Dockerfile.debian13.minimal
+            tag_suffix: "-minimal"
+          - base_type: minimal
+            platform: linux/arm64
+            dockerfile: docker/Dockerfile.debian13.minimal
+            tag_suffix: "-minimal"
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set platform pair
+        id: platform
+        run: |
+          platform=${{ matrix.platform }}
+          echo "pair=${platform//\//-}-${{ matrix.base_type }}" >> $GITHUB_OUTPUT
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=base${{ matrix.tag_suffix }}
+
+      - name: Build and push by digest
+        id: build
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ${{ matrix.dockerfile }}
+          platforms: ${{ matrix.platform }}
+          labels: ${{ steps.meta.outputs.labels }}
+          outputs: type=image,name=${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
+          cache-from: type=gha,scope=base-${{ steps.platform.outputs.pair }}
+          cache-to: type=gha,scope=base-${{ steps.platform.outputs.pair }},mode=max
+          provenance: false
+
+      - name: Export digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        uses: actions/upload-artifact@v7
+        with:
+          name: digests-${{ steps.platform.outputs.pair }}
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  merge:
+    runs-on: ubuntu-latest
+    needs: build
+    strategy:
+      matrix:
+        base_type: [debian, debian13, minimal]
+        include:
+          - base_type: debian
+            tag: base
+#           - base_type: alpine
+#             tag: base-alpine
+          - base_type: debian13
+            tag: base-debian13
+          - base_type: minimal
+            tag: base-minimal
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Download digests
+        uses: actions/download-artifact@v8
+        with:
+          path: /tmp/digests
+          pattern: digests-*-${{ matrix.base_type }}
+          merge-multiple: true
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{ matrix.tag }}
+
+      - name: Create manifest list and push
+        working-directory: /tmp/digests
+        run: |
+          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+            $(printf '${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)
+
+      - name: Inspect image
+        run: |
+          docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ matrix.tag }}
@@ -0,0 +1,103 @@
+name: Build-Deploy-Server
+
+on:
+  push:
+    branches: [ main, dev ]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: taskpool
+
+jobs:
+  build:
+    if: github.event.repository.fork == false
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        base_type: [debian]
+        include:
+          - base_type: debian
+            base_tag: base
+            tag_suffix: ""
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+          flavor: |
+            latest=false
+          tags: |
+            type=raw,value=latest-amd64${{ matrix.tag_suffix }},enable={{is_default_branch}}
+            type=ref,event=branch,suffix=-amd64${{ matrix.tag_suffix }}
+            type=sha,prefix={{branch}}-,suffix=-amd64${{ matrix.tag_suffix }}
+
+      - name: Get build time
+        id: build_time
+        run: echo "time=$(TZ='Asia/Shanghai' date '+%Y-%m-%d %H:%M:%S')" >> $GITHUB_OUTPUT
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./docker/Dockerfile
+          platforms: linux/amd64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            VERSION=${{ github.ref_name }}
+            BUILD_TIME=${{ steps.build_time.outputs.time }}
+            BASE_TAG=${{ matrix.base_tag }}
+          cache-from: type=gha,scope=linux-amd64-${{ matrix.base_type }}
+          cache-to: type=gha,scope=linux-amd64-${{ matrix.base_type }},mode=max
+          provenance: false
+
+      - name: Deploy to Demo server
+        if: github.ref == 'refs/heads/main' && matrix.base_type == 'debian'
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.DEPLOY_HOST }}
+          username: ${{ secrets.DEPLOY_USER }}
+          password: ${{ secrets.DEPLOY_PASSWORD }}
+          port: ${{ secrets.DEPLOY_PORT }}
+          script: |
+            ${{ secrets.DEPLOY_SCRIPT }}
+
+
+      # - name: Deploy to X server
+      #   if: github.ref == 'refs/heads/main' && matrix.base_type == 'debian'
+      #   uses: appleboy/ssh-action@v1.2.0
+      #   with:
+      #     host: ${{ secrets.DEPLOY_HOST }}
+      #     username: ${{ secrets.DEPLOY_USER }}
+      #     password: ${{ secrets.DEPLOY_PASSWORD }}
+      #     port: ${{ secrets.DEPLOY_PORT }}
+      #     script: |
+      #       cd ${{ secrets.DEPLOY_X_PATH }}
+      #       docker-compose -f docker-compose.yml pull
+      #       docker-compose -f docker-compose.yml up -d
@@ -0,0 +1,80 @@
+name: Build-Docker-AMD64
+
+on:
+  # push:
+  #   tags: [ 'v*' ]
+  workflow_dispatch:
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: taskpool
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        base_type: [debian, debian13, minimal]
+        include:
+          - base_type: debian
+            base_tag: base
+            tag_suffix: ""
+          # - base_type: alpine
+          #   base_tag: base-alpine
+          #   tag_suffix: "-alpine"
+          - base_type: debian13
+            base_tag: base-debian13
+            tag_suffix: "-debian13"
+          - base_type: minimal
+            base_tag: base-minimal
+            tag_suffix: "-minimal"
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+          flavor: |
+            latest=false
+          tags: |
+            type=ref,event=branch,suffix=-amd64${{ matrix.tag_suffix }}
+
+      - name: Get build time
+        id: build_time
+        run: echo "time=$(TZ='Asia/Shanghai' date '+%Y-%m-%d %H:%M:%S')" >> $GITHUB_OUTPUT
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ${{ matrix.base_type == 'minimal' && './docker/Dockerfile.minimal' || './docker/Dockerfile' }}
+          platforms: linux/amd64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            VERSION=${{ github.ref_name }}
+            BUILD_TIME=${{ steps.build_time.outputs.time }}
+            BASE_TAG=${{ matrix.base_tag }}
+          cache-from: type=gha,scope=linux-amd64-${{ matrix.base_type }}
+          cache-to: type=gha,scope=linux-amd64-${{ matrix.base_type }},mode=max
+          provenance: false
@@ -0,0 +1,89 @@
+name: Build-Docker-ARM64
+
+# on:
+#   # push:
+#   #   tags: [ 'v*' ]
+#   workflow_dispatch:
+
+on:
+  push:
+    branches: [ main, dev  ]
+  workflow_dispatch:
+
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: taskpool
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        base_type: [debian, debian13, minimal]
+        include:
+          - base_type: debian
+            base_tag: base
+            tag_suffix: ""
+          # - base_type: alpine
+          #   base_tag: base-alpine
+          #   tag_suffix: "-alpine"
+          - base_type: debian13
+            base_tag: base-debian13
+            tag_suffix: "-debian13"
+          - base_type: minimal
+            base_tag: base-minimal
+            tag_suffix: "-minimal"
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+          flavor: |
+            latest=false
+          tags: |
+            type=ref,event=branch,suffix=-arm64${{ matrix.tag_suffix }}
+
+      - name: Get build time
+        id: build_time
+        run: echo "time=$(TZ='Asia/Shanghai' date '+%Y-%m-%d %H:%M:%S')" >> $GITHUB_OUTPUT
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ${{ matrix.base_type == 'minimal' && './docker/Dockerfile.minimal' || './docker/Dockerfile' }}
+          platforms: linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            VERSION=${{ github.ref_name }}
+            BUILD_TIME=${{ steps.build_time.outputs.time }}
+            BASE_TAG=${{ matrix.base_tag }}
+          cache-from: type=gha,scope=linux-arm64-${{ matrix.base_type }}
+          cache-to: type=gha,scope=linux-arm64-${{ matrix.base_type }},mode=max
+          provenance: false
@@ -0,0 +1,74 @@
+name: Deploy VitePress to Pages
+
+on:
+  push:
+    branches: [main, docs]
+  workflow_dispatch:
+  schedule:
+    - cron: '0 1 * * *'
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
+jobs:
+  build:
+    if: github.event.repository.fork == false
+    runs-on: macos-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: 'npm'
+          cache-dependency-path: docs/package-lock.json
+
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'go.mod'
+          cache: true
+
+      - name: Generate Swagger Docs
+        run: make swag
+
+      - name: Setup Pages
+        uses: actions/configure-pages@v6
+
+      - name: Install dependencies
+        run: npm ci
+        working-directory: docs
+
+      - name: Fetch Package Download Stats
+        run: node docs/fetch-stats.js
+
+      - name: Build with VitePress
+        run: npm run docs:build
+        working-directory: docs
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: docs/.vitepress/dist
+
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    needs: build
+    runs-on: ubuntu-latest
+    name: Deploy
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v5
@@ -0,0 +1,285 @@
+name: Release-and-Build-Docker-Image
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: taskpool
+
+jobs:
+  build-binaries:
+    runs-on: macos-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'go.mod'
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '24'
+
+      - name: Build Web
+        run: make build-web
+
+      - name: Generate Swagger
+        run: make swag
+
+      - name: Build Binaries
+        run: |
+          VERSION=${{ github.ref_name }}
+          BUILD_TIME=$(TZ='Asia/Shanghai' date '+%Y/%m/%d %H:%M:%S')
+          LDFLAGS="-s -w -X 'github.com/engigu/taskpool/internal/constant.Version=$VERSION' -X 'github.com/engigu/taskpool/internal/constant.BuildTime=$BUILD_TIME'"
+          
+          # Prepare static assets for embedding
+          rm -rf internal/static/dist
+          cp -r web/dist internal/static/dist
+          
+          CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -tags web -ldflags="$LDFLAGS" -o taskpool-linux-amd64 main.go
+          tar -czvf taskpool-linux-amd64.tar.gz taskpool-linux-amd64
+          CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -tags web -ldflags="$LDFLAGS" -o taskpool-linux-arm64 main.go
+          tar -czvf taskpool-linux-arm64.tar.gz taskpool-linux-arm64
+          CGO_ENABLED=0 GOOS=android GOARCH=arm64 go build -trimpath -tags web -ldflags="$LDFLAGS" -o taskpool-android-arm64 main.go
+          tar -czvf taskpool-android-arm64.tar.gz taskpool-android-arm64
+          CGO_ENABLED=0 GOOS=linux GOARCH=arm GOARM=7 go build -trimpath -tags web -ldflags="$LDFLAGS" -o taskpool-linux-armv7 main.go
+          tar -czvf taskpool-linux-armv7.tar.gz taskpool-linux-armv7
+
+      - name: Build Agent Binaries
+        run: |
+          VERSION=${{ github.ref_name }}
+          BUILD_TIME=$(TZ='Asia/Shanghai' date '+%Y/%m/%d %H:%M:%S')
+          AGENT_LDFLAGS="-s -w -X 'main.Version=$VERSION' -X 'main.BuildTime=$BUILD_TIME'"
+          mkdir -p data/agent
+          echo "$VERSION" > data/agent/version.txt
+          
+          # Linux AMD64
+          cd agent && CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="$AGENT_LDFLAGS" -o ../data/agent/taskpool-agent-linux-amd64 . && cd ..
+          cd data/agent && cp ../../agent/config.example.ini . && tar -czvf taskpool-agent-linux-amd64.tar.gz taskpool-agent-linux-amd64 config.example.ini && rm taskpool-agent-linux-amd64 && cd ../..
+          
+          # Linux ARM64
+          cd agent && CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags="$AGENT_LDFLAGS" -o ../data/agent/taskpool-agent-linux-arm64 . && cd ..
+          cd data/agent && tar -czvf taskpool-agent-linux-arm64.tar.gz taskpool-agent-linux-arm64 config.example.ini && rm taskpool-agent-linux-arm64 && cd ../..
+          
+          # Windows AMD64
+          cd agent && CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -ldflags="$AGENT_LDFLAGS" -o ../data/agent/taskpool-agent-windows-amd64.exe . && cd ..
+          cd data/agent && zip taskpool-agent-windows-amd64.zip taskpool-agent-windows-amd64.exe config.example.ini && rm taskpool-agent-windows-amd64.exe && cd ../..
+          
+          # Darwin AMD64
+          cd agent && CGO_ENABLED=0 GOOS=darwin GOARCH=amd64 go build -ldflags="$AGENT_LDFLAGS" -o ../data/agent/taskpool-agent-darwin-amd64 . && cd ..
+          cd data/agent && tar -czvf taskpool-agent-darwin-amd64.tar.gz taskpool-agent-darwin-amd64 config.example.ini && rm taskpool-agent-darwin-amd64 && cd ../..
+          
+          # Darwin ARM64
+          cd agent && CGO_ENABLED=0 GOOS=darwin GOARCH=arm64 go build -ldflags="$AGENT_LDFLAGS" -o ../data/agent/taskpool-agent-darwin-arm64 . && cd ..
+          cd data/agent && tar -czvf taskpool-agent-darwin-arm64.tar.gz taskpool-agent-darwin-arm64 config.example.ini && rm taskpool-agent-darwin-arm64 && cd ../..
+          
+          # Android ARM64
+          cd agent && CGO_ENABLED=0 GOOS=android GOARCH=arm64 go build -trimpath -ldflags="$AGENT_LDFLAGS" -o ../data/agent/taskpool-agent-android-arm64 . && cd ..
+          cd data/agent && tar -czvf taskpool-agent-android-arm64.tar.gz taskpool-agent-android-arm64 config.example.ini && rm taskpool-agent-android-arm64 && cd ../..
+      - name: Prepare Release Notes
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if gh release view ${{ github.ref_name }} > /dev/null 2>&1; then
+            echo "$(cat CHANGELOG.md)" > FINAL_CHANGELOG.md
+            echo -e "\n\n" >> FINAL_CHANGELOG.md
+            gh release view ${{ github.ref_name }} --json body -q .body >> FINAL_CHANGELOG.md
+          else
+            cp CHANGELOG.md FINAL_CHANGELOG.md
+          fi
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.ref_name }}
+          body_path: FINAL_CHANGELOG.md
+          files: |
+            taskpool-linux-amd64.tar.gz
+            taskpool-linux-arm64.tar.gz
+            taskpool-linux-armv7.tar.gz
+            taskpool-android-arm64.tar.gz
+            data/agent/taskpool-agent-*.tar.gz
+            data/agent/taskpool-agent-*.zip
+
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        base_type: [debian, debian13, minimal]
+        platform:
+          - linux/amd64
+          - linux/arm64
+        include:
+          - base_type: debian
+            platform: linux/amd64
+            base_tag: base
+            tag_suffix: ""
+          - base_type: debian
+            platform: linux/arm64
+            base_tag: base
+            tag_suffix: ""
+#           - base_type: alpine
+#             platform: linux/amd64
+#             base_tag: base-alpine
+#             tag_suffix: "-alpine"
+#           - base_type: alpine
+#             platform: linux/arm64
+#             base_tag: base-alpine
+#             tag_suffix: "-alpine"
+          - base_type: debian13
+            platform: linux/amd64
+            base_tag: base-debian13
+            tag_suffix: "-debian13"
+          - base_type: debian13
+            platform: linux/arm64
+            base_tag: base-debian13
+            tag_suffix: "-debian13"
+          - base_type: minimal
+            platform: linux/amd64
+            base_tag: base-minimal
+            tag_suffix: "-minimal"
+          - base_type: minimal
+            platform: linux/arm64
+            base_tag: base-minimal
+            tag_suffix: "-minimal"
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set platform pair
+        id: platform
+        run: |
+          platform=${{ matrix.platform }}
+          echo "pair=${platform//\//-}-${{ matrix.base_type }}" >> $GITHUB_OUTPUT
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+
+      - name: Get build time
+        id: build_time
+        run: echo "time=$(TZ='Asia/Shanghai' date '+%Y-%m-%d %H:%M:%S')" >> $GITHUB_OUTPUT
+
+      - name: Build and push by digest
+        id: build
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ${{ matrix.base_type == 'minimal' && './docker/Dockerfile.minimal' || './docker/Dockerfile' }}
+          platforms: ${{ matrix.platform }}
+          build-args: |
+            VERSION=${{ github.ref_name }}
+            BUILD_TIME=${{ steps.build_time.outputs.time }}
+            BASE_TAG=${{ matrix.base_tag }}
+          labels: ${{ steps.meta.outputs.labels }}
+          outputs: type=image,name=${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
+          cache-from: type=gha,scope=${{ steps.platform.outputs.pair }}
+          cache-to: type=gha,scope=${{ steps.platform.outputs.pair }},mode=max
+          provenance: false
+
+      - name: Export digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        uses: actions/upload-artifact@v7
+        with:
+          name: digests-${{ steps.platform.outputs.pair }}
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  merge:
+    runs-on: ubuntu-latest
+    needs: [build, build-binaries]
+    strategy:
+      matrix:
+        base_type: [debian, debian13, minimal]
+        include:
+          - base_type: debian
+            tag_suffix: ""
+#           - base_type: alpine
+#             tag_suffix: "-alpine"
+          - base_type: debian13
+            tag_suffix: "-debian13"
+          - base_type: minimal
+            tag_suffix: "-minimal"
+
+    permissions:
+      contents: write
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Download digests
+        uses: actions/download-artifact@v8
+        with:
+          path: /tmp/digests
+          pattern: digests-*-${{ matrix.base_type }}
+          merge-multiple: true
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+          flavor: |
+            latest=false
+          tags: |
+            type=semver,pattern={{version}}${{ matrix.tag_suffix }}
+            type=raw,value=latest${{ matrix.tag_suffix }}
+
+      - name: Create manifest list and push
+        working-directory: /tmp/digests
+        run: |
+          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+            $(printf '${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)
+
+      - name: Inspect image
+        run: |
+          docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
+