diff options
-rw-r--r-- | .github/workflows/cd.yml | 42 | ||||
-rw-r--r-- | Cargo.toml | 2 | ||||
-rw-r--r-- | Dockerfile | 25 |
3 files changed, 68 insertions, 1 deletions
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml new file mode 100644 index 0000000..f428fab --- /dev/null +++ b/.github/workflows/cd.yml @@ -0,0 +1,42 @@ +name: Publish + +on: + push: + tags: + - v* +env: + IMAGE_NAME: backend +# +jobs: + push: + runs-on: ubuntu-latest + permissions: + packages: write + contents: read + # + steps: + - uses: actions/checkout@v4 + + - name: Build image + run: docker build . --file Dockerfile --tag $IMAGE_NAME --label "runnumber=${GITHUB_RUN_ID}" + + - name: Log in to registry + run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin + # + - name: Push image + run: | + IMAGE_ID=ghcr.io/${{ github.repository_owner }}/$IMAGE_NAME + + # This changes all uppercase characters to lowercase. + IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]') + # This strips the git ref prefix from the version. + VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,') + # This strips the "v" prefix from the tag name. + [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//') + # This uses the Docker `latest` tag convention. + [ "$VERSION" == "main" ] && VERSION=latest + echo IMAGE_ID=$IMAGE_ID + echo VERSION=$VERSION + docker tag $IMAGE_NAME $IMAGE_ID:$VERSION + docker push $IMAGE_ID:$VERSION + @@ -1,6 +1,6 @@ [package] name = "cas" -version = "0.1.0" +version = "0.0.1" edition = "2021" [dependencies] diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..c34bb83 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,25 @@ +# Stage 1 +FROM rust:latest as builder + +WORKDIR /app +COPY . . +RUN cargo build --release + + +# Stage 2 +FROM debian:bookworm-slim + +RUN mkdir -p /app + +RUN groupadd -g 999 appuser && \ + useradd -r -u 999 -g appuser appuser + +USER appuser + +COPY --from=builder /app/target/release/cas /app + +WORKDIR /app + +EXPOSE 8000 + +ENTRYPOINT ["./cas"] |