Use docker for manylinux workflow (cache issue)

Author: mxamin

.github/workflows/manylinux.yml

@@ -25,28 +25,10 @@ jobs:
           - manylinux_2_28_x86_64
           - musllinux_1_2_x86_64
 
-    container: quay.io/pypa/${{ matrix.image }}
-
     steps:
-      - uses: actions/checkout@v1
-
-      - name: Install python build dependencies
-        run: |
-          # https://github.com/actions/runner/issues/2033
-          chown -R $(id -u):$(id -g) $PWD
-          /opt/python/${{ matrix.python-abi }}/bin/pip install --upgrade pip setuptools wheel build 'setuptools_scm>=8'
-
-      - name: Install system build dependencies (manylinux)
-        if: contains(matrix.image, 'manylinux')
-        run: |
-          yum install -y perl-core
-
-      - name: Set environment variables
-        shell: bash
-        run: |
-          PKGVER=$(/opt/python/${{ matrix.python-abi }}/bin/python setup.py --version)
-          echo "PKGVER=$PKGVER"
-          echo "PKGVER=$PKGVER" >> $GITHUB_ENV
+      - uses: actions/checkout@v5.0.0
+        with:
+          fetch-depth: 0
 
       - name: Cache [libs]
         uses: actions/cache/restore@v4.3.0
@@ -57,26 +39,62 @@ jobs:
             libs/*.zip
           key: libs-${{ runner.os }}-${{ runner.arch }}-${{ env.LIBXML2_VERSION }}-${{ env.LIBXSLT_VERSION }}
 
-      - name: Build linux_x86_64 wheel
+      # Keep this job on the host runner so JS-based actions (for example actions/cache)
+      # can run, then execute build/test inside the target manylinux/musllinux container.
+      - name: Build and test in container
         env:
           PYXMLSEC_STATIC_DEPS: true
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PY_ABI: ${{ matrix.python-abi }}
+          MANYLINUX_IMAGE: ${{ matrix.image }}
         run: |
-          /opt/python/${{ matrix.python-abi }}/bin/python -m build
+          set -euxo pipefail
+          docker run --rm \
+            -v "$PWD:$PWD" \
+            -w "$PWD" \
+            -e GH_TOKEN \
+            -e PYXMLSEC_STATIC_DEPS \
+            -e PYXMLSEC_LIBXML2_VERSION \
+            -e PYXMLSEC_LIBXSLT_VERSION \
+            -e PY_ABI \
+            -e MANYLINUX_IMAGE \
+            -e HOST_UID="$(id -u)" \
+            -e HOST_GID="$(id -g)" \
+            "quay.io/pypa/${MANYLINUX_IMAGE}" \
+            sh -lc '
+              set -eu
 
-      - name: Label manylinux wheel
-        run: |
-          ls -la dist/
-          auditwheel show dist/xmlsec-${{ env.PKGVER }}-${{ matrix.python-abi }}-linux_x86_64.whl
-          auditwheel repair dist/xmlsec-${{ env.PKGVER }}-${{ matrix.python-abi }}-linux_x86_64.whl
-          ls -la wheelhouse/
-          auditwheel show wheelhouse/xmlsec-${{ env.PKGVER }}-${{ matrix.python-abi }}-*${{ matrix.image }}*.whl
+              # Step: Install system build dependencies (manylinux only)
+              case "$MANYLINUX_IMAGE" in
+                manylinux*)
+                  yum install -y perl-core
+                  ;;
+              esac
 
-      - name: Install test dependencies
-        run: |
-          /opt/python/${{ matrix.python-abi }}/bin/pip install --upgrade -r requirements-test.txt
-          /opt/python/${{ matrix.python-abi }}/bin/pip install xmlsec --only-binary=xmlsec --no-index --find-links=wheelhouse/
+              # Step: Install python build dependencies
+              /opt/python/${PY_ABI}/bin/pip install --upgrade pip setuptools wheel build setuptools_scm\>=8
 
-      - name: Run tests
-        run: |
-          /opt/python/${{ matrix.python-abi }}/bin/pytest -v --color=yes
+              # Step: Set environment variables
+              PKGVER=$(/opt/python/${PY_ABI}/bin/python setup.py --version)
+              echo "PKGVER=$PKGVER"
+
+              # Step: Build linux_x86_64 wheel
+              /opt/python/${PY_ABI}/bin/python -m build
+
+              # Step: Label manylinux wheel
+              ls -la dist/
+              auditwheel show dist/xmlsec-${PKGVER}-${PY_ABI}-linux_x86_64.whl
+              auditwheel repair dist/xmlsec-${PKGVER}-${PY_ABI}-linux_x86_64.whl
+              ls -la wheelhouse/
+              auditwheel show wheelhouse/xmlsec-${PKGVER}-${PY_ABI}-*${MANYLINUX_IMAGE}*.whl
+
+              # Step: Install test dependencies
+              /opt/python/${PY_ABI}/bin/pip install --upgrade -r requirements-test.txt
+              /opt/python/${PY_ABI}/bin/pip install xmlsec --only-binary=xmlsec --no-index --find-links=wheelhouse/
+
+              # Step: Run tests
+              /opt/python/${PY_ABI}/bin/pytest -v --color=yes
+
+              # Step: Fix mounted workspace file ownership on host
+              chown -R "${HOST_UID}:${HOST_GID}" dist wheelhouse build libs || true
+            '