99 lines
3.9 KiB
YAML
99 lines
3.9 KiB
YAML
# Build and Publish Docker image (runs on push to main - deploy manually)
|
|
# Secrets required in Woodpecker: gitea_registry_username, gitea_package_token, discord_webhook_url
|
|
# Project must be set to "Trusted" in Woodpecker for the Docker build step (privileged).
|
|
when:
|
|
branch: main
|
|
event: push
|
|
|
|
steps:
|
|
- name: Docker image build
|
|
image: docker:latest
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
commands:
|
|
- set -e
|
|
- echo "=== Building Docker image ==="
|
|
- 'echo "Commit SHA: ${CI_COMMIT_SHA:0:8}"'
|
|
- |
|
|
docker build \
|
|
--tag git.mifi.dev/mifi-holdings/mail-autoconfig:${CI_COMMIT_SHA} \
|
|
--tag git.mifi.dev/mifi-holdings/mail-autoconfig:latest \
|
|
--label "git.commit=${CI_COMMIT_SHA}" \
|
|
--label "git.branch=${CI_COMMIT_BRANCH}" \
|
|
.
|
|
|
|
- name: Send Docker Image Build Status Notification (failure)
|
|
image: curlimages/curl
|
|
environment:
|
|
MATTERMOST_BOT_ACCESS_TOKEN:
|
|
from_secret: mattermost_bot_access_token
|
|
MATTERMOST_CHANNEL_ID:
|
|
from_secret: mattermost_pushes_channel_id
|
|
MATTERMOST_POST_API_URL:
|
|
from_secret: mattermost_post_api_url
|
|
commands:
|
|
- |
|
|
BODY=$(printf '{"channel_id":"%s","message":"[%s - Build #%s] Docker image build failure 💩"}' "$MATTERMOST_CHANNEL_ID" "$CI_REPO" "$CI_PIPELINE_NUMBER")
|
|
curl -sS -X POST -H "Content-Type: application/json" -d "$BODY" -H "Authorization: Bearer $MATTERMOST_BOT_ACCESS_TOKEN" $MATTERMOST_POST_API_URL
|
|
depends_on:
|
|
- Docker image build
|
|
when:
|
|
- status: [failure]
|
|
|
|
- name: Push to registry
|
|
image: docker:latest
|
|
environment:
|
|
REGISTRY_URL: git.mifi.dev
|
|
REGISTRY_REPO: git.mifi.dev/mifi-holdings/mail-autoconfig
|
|
REGISTRY_USERNAME:
|
|
from_secret: gitea_registry_username
|
|
REGISTRY_PASSWORD:
|
|
from_secret: gitea_package_token
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
depends_on:
|
|
- Docker image build
|
|
commands:
|
|
- set -e
|
|
- echo "=== Pushing to registry ==="
|
|
- echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY_URL" -u "$REGISTRY_USERNAME" --password-stdin
|
|
- docker push $REGISTRY_REPO:${CI_COMMIT_SHA}
|
|
- docker push $REGISTRY_REPO:latest
|
|
- echo "✓ Images pushed successfully"
|
|
|
|
- name: Send Push to Registry Status Notification (success)
|
|
image: curlimages/curl
|
|
environment:
|
|
MATTERMOST_BOT_ACCESS_TOKEN:
|
|
from_secret: mattermost_bot_access_token
|
|
MATTERMOST_CHANNEL_ID:
|
|
from_secret: mattermost_pushes_channel_id
|
|
MATTERMOST_POST_API_URL:
|
|
from_secret: mattermost_post_api_url
|
|
commands:
|
|
- |
|
|
BODY=$(printf '{"channel_id":"%s","message":"[%s - Build #%s] Push to registry success 🎉"}' "$MATTERMOST_CHANNEL_ID" "$CI_REPO" "$CI_PIPELINE_NUMBER")
|
|
curl -sS -X POST -H "Content-Type: application/json" -d "$BODY" -H "Authorization: Bearer $MATTERMOST_BOT_ACCESS_TOKEN" $MATTERMOST_POST_API_URL
|
|
depends_on:
|
|
- Push to registry
|
|
when:
|
|
- status: [success]
|
|
|
|
- name: Send Push to Registry Status Notification (failure)
|
|
image: curlimages/curl
|
|
environment:
|
|
MATTERMOST_BOT_ACCESS_TOKEN:
|
|
from_secret: mattermost_bot_access_token
|
|
MATTERMOST_CHANNEL_ID:
|
|
from_secret: mattermost_pushes_channel_id
|
|
MATTERMOST_POST_API_URL:
|
|
from_secret: mattermost_post_api_url
|
|
commands:
|
|
- |
|
|
BODY=$(printf '{"channel_id":"%s","message":"[%s - Build #%s] Push to registry failure 💩"}' "$MATTERMOST_CHANNEL_ID" "$CI_REPO" "$CI_PIPELINE_NUMBER")
|
|
curl -sS -X POST -H "Content-Type: application/json" -d "$BODY" -H "Authorization: Bearer $MATTERMOST_BOT_ACCESS_TOKEN" $MATTERMOST_POST_API_URL
|
|
depends_on:
|
|
- Push to registry
|
|
when:
|
|
- status: [failure]
|