develop #8
|
@ -1,5 +1,5 @@
|
||||||
name: Unit Tests with docker compose and cargo
|
name: Unit Tests with docker compose and cargo
|
||||||
on: [push, pull_request]
|
on: [push]
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
unit-test:
|
unit-test:
|
||||||
|
@ -19,4 +19,4 @@ jobs:
|
||||||
- name: Get access token from secret
|
- name: Get access token from secret
|
||||||
run: echo "${{ secrets.MASTODON_SECRET }}" > mastodon-data.toml
|
run: echo "${{ secrets.MASTODON_SECRET }}" > mastodon-data.toml
|
||||||
- name: Run tests on docker
|
- name: Run tests on docker
|
||||||
run: docker compose down -v && docker compose run bot t
|
run: docker compose down -v && docker compose run bot t
|
||||||
|
|
|
@ -1,12 +1,9 @@
|
||||||
name: Build image
|
name: Build image
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches:
|
|
||||||
- main
|
|
||||||
- build
|
|
||||||
tags:
|
tags:
|
||||||
- v*
|
- v*
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build:
|
build:
|
||||||
container:
|
container:
|
||||||
|
@ -31,9 +28,9 @@ jobs:
|
||||||
git.fai.st/fedi-image-bot/mastodon-image-uploader-bot
|
git.fai.st/fedi-image-bot/mastodon-image-uploader-bot
|
||||||
# generate Docker tags based on the following events/attributes
|
# generate Docker tags based on the following events/attributes
|
||||||
tags: |
|
tags: |
|
||||||
type=raw,value=latest,enable=${{ github.ref == format('refs/heads/{0}', 'main') }}
|
type=raw,value=latest
|
||||||
type=ref,event=branch
|
type=ref,event=branch
|
||||||
type=semver,pattern={{raw}}
|
type=semver,pattern={{raw}}
|
||||||
- name: Set up Docker Buildx
|
- name: Set up Docker Buildx
|
||||||
uses: docker/setup-buildx-action@v2
|
uses: docker/setup-buildx-action@v2
|
||||||
- name: Login to fai.st docker registry
|
- name: Login to fai.st docker registry
|
||||||
|
@ -49,4 +46,4 @@ jobs:
|
||||||
context: .
|
context: .
|
||||||
push: true
|
push: true
|
||||||
tags: ${{ steps.meta.outputs.tags }}
|
tags: ${{ steps.meta.outputs.tags }}
|
||||||
labels: ${{ steps.meta.outputs.labels }}
|
labels: ${{ steps.meta.outputs.labels }}
|
||||||
|
|
35
Dockerfile
35
Dockerfile
|
@ -1,48 +1,25 @@
|
||||||
# syntax=docker/dockerfile:1
|
# syntax=docker/dockerfile:1
|
||||||
|
|
||||||
# Comments are provided throughout this file to help you get started.
|
|
||||||
# If you need more help, visit the Dockerfile reference guide at
|
|
||||||
# https://docs.docker.com/engine/reference/builder/
|
|
||||||
|
|
||||||
################################################################################
|
|
||||||
# Create a stage for building the application.
|
|
||||||
|
|
||||||
ARG APP_NAME=mastodon-image-uploader-bot
|
|
||||||
FROM rust:1.79.0-slim-bullseye AS build
|
FROM rust:1.79.0-slim-bullseye AS build
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
ARG APP_NAME=mastodon-image-uploader-bot
|
||||||
|
|
||||||
RUN apt update && apt install pkg-config openssl libssl-dev -y
|
RUN apt update && apt install pkg-config openssl libssl-dev -y
|
||||||
# Build the application.
|
|
||||||
# Leverage a cache mount to /usr/local/cargo/registry/
|
|
||||||
# for downloaded dependencies and a cache mount to /app/target/ for
|
|
||||||
# compiled dependencies which will speed up subsequent builds.
|
|
||||||
# Leverage a bind mount to the src directory to avoid having to copy the
|
|
||||||
# source code into the container. Once built, copy the executable to an
|
|
||||||
# output directory before the cache mounted /app/target is unmounted.
|
|
||||||
RUN --mount=type=bind,source=src,target=src \
|
RUN --mount=type=bind,source=src,target=src \
|
||||||
--mount=type=bind,source=Cargo.toml,target=Cargo.toml \
|
--mount=type=bind,source=Cargo.toml,target=Cargo.toml \
|
||||||
--mount=type=bind,source=Cargo.lock,target=Cargo.lock \
|
--mount=type=bind,source=Cargo.lock,target=Cargo.lock \
|
||||||
<<EOF
|
<<EOF
|
||||||
set -e
|
set -e
|
||||||
cargo build --locked --release
|
cargo build --locked --release
|
||||||
|
ls ./target/release/$APP_NAME
|
||||||
cp ./target/release/$APP_NAME /bin/bot
|
cp ./target/release/$APP_NAME /bin/bot
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
################################################################################
|
|
||||||
# Create a new stage for running the application that contains the minimal
|
|
||||||
# runtime dependencies for the application. This often uses a different base
|
|
||||||
# image from the build stage where the necessary files are copied from the build
|
|
||||||
# stage.
|
|
||||||
#
|
|
||||||
# The example below uses the debian bullseye image as the foundation for running the app.
|
|
||||||
# By specifying the "bullseye-slim" tag, it will also use whatever happens to be the
|
|
||||||
# most recent version of that tag when you build your Dockerfile. If
|
|
||||||
# reproducability is important, consider using a digest
|
|
||||||
# (e.g., debian@sha256:ac707220fbd7b67fc19b112cee8170b41a9e97f703f588b2cdbbcdcecdd8af57).
|
|
||||||
FROM debian:bullseye-slim AS final
|
FROM debian:bullseye-slim AS final
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
RUN apt update && apt install pkg-config openssl libssl-dev curl -y
|
RUN apt update && apt install pkg-config openssl libssl-dev curl -y
|
||||||
# Create a non-privileged user that the app will run under.
|
|
||||||
# See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
|
|
||||||
ARG UID=10001
|
ARG UID=10001
|
||||||
RUN adduser \
|
RUN adduser \
|
||||||
--disabled-password \
|
--disabled-password \
|
||||||
|
@ -52,8 +29,6 @@ RUN adduser \
|
||||||
botuser
|
botuser
|
||||||
USER botuser
|
USER botuser
|
||||||
|
|
||||||
# Copy the executable from the "build" stage.
|
|
||||||
COPY --from=build /bin/bot /bin/
|
COPY --from=build /bin/bot /bin/
|
||||||
|
|
||||||
# What the container should run when it is started.
|
|
||||||
CMD ["/bin/bot"]
|
CMD ["/bin/bot"]
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
version: "3"
|
|
||||||
|
|
||||||
services:
|
services:
|
||||||
mongodb:
|
mongodb:
|
||||||
image: mongo:bionic
|
image: mongo:bionic
|
||||||
|
@ -38,4 +36,4 @@ services:
|
||||||
- ./:/app:rw
|
- ./:/app:rw
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
mongodb_data:
|
mongodb_data:
|
||||||
|
|
Loading…
Reference in New Issue