Lucien Cartier-Tilet
9b981e8545
All checks were successful
Publish Docker Images / build-and-publish (push) Successful in 7m26s
124 lines
4.5 KiB
YAML
124 lines
4.5 KiB
YAML
name: Publish Docker Images
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- develop
|
|
tags:
|
|
- 'v*.*.*'
|
|
pull_request:
|
|
types: [opened, synchronize, reopened]
|
|
|
|
env:
|
|
CACHIX_NAME: devenv
|
|
CACHIX_SKIP_PUSH: true
|
|
DOCKER_REGISTRY: labs.phundrak.com # Override in repository settings if needed
|
|
IMAGE_NAME: phundrak/phundrak-dot-com-backend
|
|
|
|
jobs:
|
|
build-and-publish:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write # Required for pushing to Phundrak Labs registry
|
|
pull-requests: read
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Nix
|
|
uses: cachix/install-nix-action@v27
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
|
|
- name: Setup Cachix
|
|
uses: cachix/cachix-action@v15
|
|
with:
|
|
name: '${{ env.CACHIX_NAME }}'
|
|
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
|
|
skipPush: ${{ env.CACHIX_SKIP_PUSH }}
|
|
|
|
- name: Build Docker image with Nix
|
|
run: |
|
|
echo "Building Docker image..."
|
|
nix build .#backendDockerLatest --accept-flake-config
|
|
|
|
- name: Load Docker image
|
|
run: |
|
|
echo "Loading Docker image into Docker daemon..."
|
|
docker load < result
|
|
|
|
- name: Log in to Docker Registry
|
|
run: |
|
|
echo "${{ secrets.DOCKER_PASSWORD }}" | docker login ${{ env.DOCKER_REGISTRY }} -u ${{ secrets.DOCKER_USERNAME }} --password-stdin
|
|
|
|
- name: Determine tags and push images
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
REGISTRY="${{ env.DOCKER_REGISTRY }}"
|
|
IMAGE_NAME="${{ env.IMAGE_NAME }}"
|
|
|
|
# The locally built image from Nix (name comes from Cargo.toml package.name)
|
|
LOCAL_IMAGE="phundrak/phundrak-dot-com-backend:latest"
|
|
|
|
echo "Event: ${{ github.event_name }}"
|
|
echo "Ref: ${{ github.ref }}"
|
|
echo "Ref type: ${{ github.ref_type }}"
|
|
|
|
# Determine which tags to push based on the event
|
|
if [[ "${{ github.event_name }}" == "push" && "${{ github.ref_type }}" == "tag" ]]; then
|
|
# Tag push on main branch → publish 'latest' and versioned tag
|
|
echo "Tag push detected"
|
|
TAG_VERSION="${{ github.ref_name }}"
|
|
# Remove 'v' prefix if present (v1.0.0 → 1.0.0)
|
|
TAG_VERSION="${TAG_VERSION#v}"
|
|
|
|
echo "Tagging and pushing: ${REGISTRY}/${IMAGE_NAME}:latest"
|
|
docker tag "${LOCAL_IMAGE}" "${REGISTRY}/${IMAGE_NAME}:latest"
|
|
docker push "${REGISTRY}/${IMAGE_NAME}:latest"
|
|
|
|
echo "Tagging and pushing: ${REGISTRY}/${IMAGE_NAME}:${TAG_VERSION}"
|
|
docker tag "${LOCAL_IMAGE}" "${REGISTRY}/${IMAGE_NAME}:${TAG_VERSION}"
|
|
docker push "${REGISTRY}/${IMAGE_NAME}:${TAG_VERSION}"
|
|
|
|
elif [[ "${{ github.event_name }}" == "push" && "${{ github.ref }}" == "refs/heads/develop" ]]; then
|
|
# Push on develop branch → publish 'develop' tag
|
|
echo "Push to develop branch detected"
|
|
|
|
echo "Tagging and pushing: ${REGISTRY}/${IMAGE_NAME}:develop"
|
|
docker tag "${LOCAL_IMAGE}" "${REGISTRY}/${IMAGE_NAME}:develop"
|
|
docker push "${REGISTRY}/${IMAGE_NAME}:develop"
|
|
|
|
elif [[ "${{ github.event_name }}" == "pull_request" ]]; then
|
|
# Pull request → publish 'pr<number>' tag
|
|
echo "Pull request detected"
|
|
PR_NUMBER="${{ github.event.pull_request.number }}"
|
|
|
|
echo "Tagging and pushing: ${REGISTRY}/${IMAGE_NAME}:pr${PR_NUMBER}"
|
|
docker tag "${LOCAL_IMAGE}" "${REGISTRY}/${IMAGE_NAME}:pr${PR_NUMBER}"
|
|
docker push "${REGISTRY}/${IMAGE_NAME}:pr${PR_NUMBER}"
|
|
|
|
elif [[ "${{ github.event_name }}" == "push" && "${{ github.ref }}" == "refs/heads/main" ]]; then
|
|
# Push to main branch (not a tag) → publish 'latest'
|
|
echo "Push to main branch detected"
|
|
|
|
echo "Tagging and pushing: ${REGISTRY}/${IMAGE_NAME}:latest"
|
|
docker tag "${LOCAL_IMAGE}" "${REGISTRY}/${IMAGE_NAME}:latest"
|
|
docker push "${REGISTRY}/${IMAGE_NAME}:latest"
|
|
|
|
else
|
|
echo "Unknown event or ref, skipping push"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Log out from Docker Registry
|
|
if: always()
|
|
run: docker logout ${{ env.DOCKER_REGISTRY }}
|
|
|
|
- name: Image published successfully
|
|
run: |
|
|
echo "✅ Docker image(s) published successfully to ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}"
|