CI: Update Workflow Runners to Self-Hosted container-registry (#317)

* ci: update CI runners to self-hosted container-registry

Signed-off-by: bupd <bupdprasanth@gmail.com>

* ci: revert e2e jobs to ubuntu-latest for docker support

Signed-off-by: bupd <bupdprasanth@gmail.com>

* ci: revert release jobs to ubuntu-latest for docker buildx support

Signed-off-by: bupd <bupdprasanth@gmail.com>

* ci: use remote buildkit for release jobs on self-hosted runner

Signed-off-by: bupd <bupdprasanth@gmail.com>

* ci: add self-hosted label to runner directives

Signed-off-by: bupd <bupdprasanth@gmail.com>

* ci: revert self-hosted label, use container-registry only for ARC

Signed-off-by: bupd <bupdprasanth@gmail.com>

* ci: make remote buildx builder creation idempotent

Signed-off-by: bupd <bupdprasanth@gmail.com>

---------

Signed-off-by: bupd <bupdprasanth@gmail.com>

Author: bupd

.github/actions/publish-and-sign/action.yaml

@@ -34,8 +34,11 @@ runs:
       with:
         version: 3.x
 
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+    - name: Set up Docker Buildx with remote BuildKit
+      shell: bash
+      run: |
+        docker buildx inspect remote || docker buildx create --name remote --driver remote tcp://buildkitd.github-runners.svc:1234
+        docker buildx use remote
 
     - name: Install Cosign
       uses: sigstore/cosign-installer@v3.7.0

.github/workflows/labeler.yaml

@@ -7,7 +7,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     steps:
     - name: Label PR
       uses: actions/labeler@v5

.github/workflows/lint.yaml

@@ -6,7 +6,7 @@ on:
       - "assets/**"
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     permissions:
       contents: write
       packages: write

.github/workflows/release.yaml

@@ -15,7 +15,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     steps:
       - name: Print GitHub ref for debugging
@@ -44,7 +44,7 @@ jobs:
       contents: write
       packages: write
       id-token: write
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     if: github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/'))
     steps:
       - name: Checkout repo

.github/workflows/test.yaml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   vulnerability-check:
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4
@@ -41,7 +41,7 @@ jobs:
           fi
 
   test-release:
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4
@@ -71,7 +71,7 @@ jobs:
         run: task snapshot
 
   build-satellite:
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -90,7 +90,7 @@ jobs:
         run: task _build:satellite
 
   build-ground-control:
-    runs-on: ubuntu-latest
+    runs-on: container-registry
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4