Handle multi-arch container images (#315)

Closes #263. See also #309 for other fixes to the pipeline that relies
on these helpers.

---------

Co-authored-by: Terry Kong <[email protected]>

.github/workflows/_triage.yaml

@@ -117,8 +117,8 @@ jobs:
           filter_valid_tags() {
             fgrep -x -f <(echo "$ALL_BASE_TAGS")
           }
-          start_date=${BASE_IMAGE##*nightly-}
-          end_date=$(get_build_date ${{ secrets.GITHUB_TOKEN }} $BROKEN_IMAGE )
+          start_date=$(get_build_date $BASE_IMAGE linux amd64)
+          end_date=$(get_build_date $BROKEN_IMAGE linux amd64)
           if ! docker manifest inspect ${BASE_IMAGE} >/dev/null 2>&1; then
             echo "Script assumes $BASE_IMAGE exists, but it wasn't found"
             exit 1
@@ -453,4 +453,4 @@ jobs:
           assignee: ${{ steps.summary-table.outputs.ASSIGNEE }}
           labels: "[\"auto-triage\"]"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/scripts/get_build_date.sh

@@ -1,12 +1,10 @@
 #!/bin/bash
-
-source $( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )/inspect_remote_img.sh
 get_build_date() {
-  if [[ $# -ne 2 ]]; then
-    echo 'get_build_date $GH_TOKEN $IMAGE'
-    echo 'Example: get_build_date XXXXXXXXXXXX ghcr.io/nvidia/t5x:latest'
+  if [[ $# -ne 3 ]]; then
+    echo 'get_build_date $IMAGE $OS $ARCH'
+    echo 'Example: get_build_date ghcr.io/nvidia/upstream-t5x:latest linux amd64'
     echo 'Returns the BUILD_DATE of a tagged remote image (no download)'
     return 1
   fi
-  inspect_remote_img $@ | jq -r '.config.Labels["org.opencontainers.image.created"]'
+  skopeo inspect --override-arch "${3}" --override-os "${2}" "docker://${1}"  | jq -r '.Labels["org.opencontainers.image.created"]'
 }

.github/workflows/scripts/get_remote_env.sh

@@ -1,13 +1,11 @@
 #!/bin/bash
-
-source $( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )/inspect_remote_img.sh
 get_remote_env() {
-  if [[ $# -ne 2 ]]; then
-    echo 'get_remote_env $GH_TOKEN $IMAGE'
-    echo 'Example: get_remote_env XXXXXXXXXXXX ghcr.io/nvidia/t5x:latest'
+  if [[ $# -ne 3 ]]; then
+    echo 'get_remote_env $IMAGE $OS $ARCH'
+    echo 'Example: get_remote_env ghcr.io/nvidia/upstream-t5x:latest linux amd64'
     echo 'Returns the ENV of a tagged remote image (no download)'
     echo 'Useful to inspect CUDA env vars'
     return 1
   fi
-  inspect_remote_img $@ | jq .config.Env
+  skopeo inspect --override-arch "${3}" --override-os "${2}" "docker://${1}"  | jq -r '.Env'
 }

.github/workflows/scripts/get_remote_labels.sh

@@ -1,12 +1,10 @@
 #!/bin/bash
-
-source $( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )/inspect_remote_img.sh
 get_remote_labels() {
-  if [[ $# -ne 2 ]]; then
-    echo '[get_remote_labels](./get_remote_labels.sh) $GH_TOKEN $IMAGE'
-    echo 'Example: get_remote_labels XXXXXXXXXXXX ghcr.io/nvidia/t5x:latest'
+  if [[ $# -ne 3 ]]; then
+    echo 'get_remote_labels $IMAGE $OS $ARCH'
+    echo 'Example: get_remote_labels ghcr.io/nvidia/upstream-t5x:latest linux amd64'
     echo 'Returns the opencontainer annotation labels of a tagged remote image (no download)'
     return 1
   fi
-  inspect_remote_img $@ | jq .config.Labels
+  skopeo inspect --override-arch "${3}" --override-os "${2}" "docker://${1}"  | jq -r '.Labels'
 }