ci: experimenting with Composite.Dockerfile #37
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI compile & test & build | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| jobs: | |
| ci-fe: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup Node.js 18.x | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 18.x | |
| - name: Cache NPM packages | |
| uses: actions/cache@v4 | |
| with: | |
| key: npm-${{ hashFiles('./Kemkas.Web/frontend/yarn.lock') }} | |
| path: | | |
| ./Kemkas.Web/frontend/node_modules | |
| restore-keys: | | |
| npm-${{ hashFiles('./Kemkas.Web/frontend/yarn.lock') }} | |
| npm- | |
| - name: Yarn Install | |
| run: | | |
| cd ./Kemkas.Web/frontend | |
| yarn install --frozen-lockfiles | |
| - name: Yarn Test | |
| run: | | |
| cd ./Kemkas.Web/frontend | |
| ./compile-less.sh | |
| yarn build | |
| docker-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: docker/setup-buildx-action@v3 | |
| - name: Install doctl | |
| uses: digitalocean/action-doctl@v2 | |
| with: | |
| token: ${{ secrets.DO_ACCESS_TOKEN }} | |
| - name: Log in to DigitalOcean Container Registry with short-lived credentials | |
| run: doctl registry login --expiry-seconds 1200 | |
| - name: Log in to GitHub Container Registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| - uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| file: Kemkas.Web/Dockerfile | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| push: false | |
| load: true | |
| tags: kemkas/kemkas:edge | |
| - name: Tag container image | |
| run: | | |
| docker tag kemkas/kemkas:edge registry.digitalocean.com/kemkas/kemkas:${GITHUB_SHA::8} | |
| docker tag kemkas/kemkas:edge ghcr.io/${{ github.repository_owner }}/kemkas:${GITHUB_SHA::8} | |
| - name: Push image to Container Registry | |
| run: | | |
| docker push registry.digitalocean.com/kemkas/kemkas:${GITHUB_SHA::8} | |
| docker push ghcr.io/${{ github.repository_owner }}/kemkas:${GITHUB_SHA::8} | |
| docker-fe-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: docker/setup-buildx-action@v3 | |
| - name: Install doctl | |
| uses: digitalocean/action-doctl@v2 | |
| with: | |
| token: ${{ secrets.DO_ACCESS_TOKEN }} | |
| - name: Log in to DigitalOcean Container Registry with short-lived credentials | |
| run: doctl registry login --expiry-seconds 1200 | |
| - name: Log in to GitHub Container Registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| - uses: docker/build-push-action@v5 | |
| with: | |
| context: ./Kemkas.Web/frontend/ | |
| file: ./Kemkas.Web/frontend/Dockerfile | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| push: false | |
| load: true | |
| tags: kemkas/kemkas-fe:edge | |
| - name: Tag container image | |
| run: | | |
| docker tag kemkas/kemkas-fe:edge registry.digitalocean.com/kemkas/kemkas-fe:${GITHUB_SHA::8} | |
| docker tag kemkas/kemkas-fe:edge ghcr.io/${{ github.repository_owner }}/kemkas-fe:${GITHUB_SHA::8} | |
| - name: Push image to Container Registry | |
| run: | | |
| docker push registry.digitalocean.com/kemkas/kemkas-fe:${GITHUB_SHA::8} | |
| docker push ghcr.io/${{ github.repository_owner }}/kemkas-fe:${GITHUB_SHA::8} | |
| docker-be-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: docker/setup-buildx-action@v3 | |
| - name: Install doctl | |
| uses: digitalocean/action-doctl@v2 | |
| with: | |
| token: ${{ secrets.DO_ACCESS_TOKEN }} | |
| - name: Log in to DigitalOcean Container Registry with short-lived credentials | |
| run: doctl registry login --expiry-seconds 1200 | |
| - name: Log in to GitHub Container Registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| - uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| file: Kemkas.Web/Backend.Dockerfile | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| push: false | |
| load: true | |
| tags: kemkas/kemkas-be:edge | |
| - name: Tag container image | |
| run: | | |
| docker tag kemkas/kemkas-be:edge registry.digitalocean.com/kemkas/kemkas-be:${GITHUB_SHA::8} | |
| docker tag kemkas/kemkas-be:edge ghcr.io/${{ github.repository_owner }}/kemkas-be:${GITHUB_SHA::8} | |
| - name: Push image to Container Registry | |
| run: | | |
| docker push registry.digitalocean.com/kemkas/kemkas-be:${GITHUB_SHA::8} | |
| docker push ghcr.io/${{ github.repository_owner }}/kemkas-be:${GITHUB_SHA::8} | |
| docker-composit-build: | |
| runs-on: ubuntu-latest | |
| needs: | |
| - docker-be-build | |
| - docker-fe-build | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: docker/setup-buildx-action@v3 | |
| - name: Log in to GitHub Container Registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| - uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| file: Kemkas.Web/Composite.Dockerfile | |
| args: FE_TAG=${GITHUB_SHA::8},BE_TAG=${GITHUB_SHA::8} | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| push: false | |
| load: true | |
| tags: ghcr.io/${{ github.repository_owner }}/kemkas/kemkas-composite:${GITHUB_SHA::8} | |
| deploy: | |
| runs-on: ubuntu-latest | |
| needs: | |
| - ci-fe | |
| - docker-build | |
| if: ${{ github.event_name == 'push' || ( github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged ) }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install doctl | |
| uses: digitalocean/action-doctl@v2 | |
| with: | |
| token: ${{ secrets.DO_ACCESS_TOKEN }} | |
| - name: Log in to DigitalOcean Container Registry with short-lived credentials | |
| run: doctl registry login --expiry-seconds 1200 | |
| - name: Log in to GitHub Container Registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| - name: Tag container image with latest tag | |
| run: | | |
| docker pull ghcr.io/${{ github.repository_owner }}/kemkas:${GITHUB_SHA::8} | |
| docker pull registry.digitalocean.com/kemkas/kemkas:${GITHUB_SHA::8} | |
| docker tag registry.digitalocean.com/kemkas/kemkas:${GITHUB_SHA::8} registry.digitalocean.com/kemkas/kemkas:latest | |
| docker tag ghcr.io/${{ github.repository_owner }}/kemkas:${GITHUB_SHA::8} ghcr.io/${{ github.repository_owner }}/kemkas:latest | |
| - name: Push image to Container Registry | |
| run: | | |
| docker push registry.digitalocean.com/kemkas/kemkas:latest | |
| docker push ghcr.io/${{ github.repository_owner }}/kemkas:latest | |
| - name: Get container image ID of the images just pushed | |
| run: | | |
| docker images ghcr.io/${{ github.repository_owner }}/kemkas:${GITHUB_SHA::8} --format "{{.ID}}" | |
| export DOCKER_IMAGE_ID=$(docker images ghcr.io/${{ github.repository_owner }}/kemkas:${GITHUB_SHA::8} --format "{{.ID}}") | |
| export DOCKER_IMAGE_ID=GHCR-$DOCKER_IMAGE_ID | |
| echo "DOCKER_IMAGE_ID=$DOCKER_IMAGE_ID" >> $GITHUB_ENV | |
| - name: Tag commit with docker image ID | |
| uses: actions/github-script@v5 | |
| with: | |
| script: | | |
| github.rest.git.createRef({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| ref: "refs/tags/${{ env.DOCKER_IMAGE_ID }}", | |
| sha: context.sha | |
| }) |