include

# VARIABLES

variables:

  DOCKER_BUILDKIT: 1

  DOCKER_DRIVER: overlay2

  DOCKER_HOST: tcp://localhost:2375

  DOCKER_TLS_CERTDIR: ""

include:

  project: 'tools/continuous-integration/docker/docker-pure-trunk-latest'

  file: 'gitlab-ci.yml'

##########################################################################################################

## PIPELINE DEFINITION

stages:

  - check

  - lint

  - build

  - test

  - scan

  - release

##########################################################################################################

### COMMON SECTION

.common: &common

  image: registry.cyberbrain.pw/docker/docker

  before_script:

    - docker login -u gitlab-ci-token -p $CI_BUILD_TOKEN $CI_REGISTRY

    - alias drr="docker run --rm -v \${PWD}:\${PWD} -w \${PWD}"

##########################################################################################################

#### CHECK SECTION

check:

  <<: *common

  stage: check

  variables:

    GIT_DEPTH: 1

  services:

    - registry.cyberbrain.pw/docker/dind

  script:

    - drr registry.cyberbrain.pw/tools/linters/hadolint hadolint --ignore DL3007 Dockerfile

##########################################################################################################

#### BUILD SECTION

build:

  <<: *common

  stage: build

  variables:

    GIT_DEPTH: 1

  services:

    - registry.cyberbrain.pw/docker/dind

  script:

    - docker pull "${CI_REGISTRY_IMAGE}:latest" || true

    - docker build --cache-from "${CI_REGISTRY_IMAGE}:latest" -t "${CI_REGISTRY_IMAGE}:temp-${CI_PIPELINE_IID}" -f ./Dockerfile .

    - docker push "${CI_REGISTRY_IMAGE}:temp-$CI_PIPELINE_IID"

##########################################################################################################

#### TEST SECTION

test:

  <<: *common

  stage: test

  variables:

    GIT_STRATEGY: "none"

  image: ${DOCKER_IMAGE}

  services:

    - "${CI_REGISTRY_IMAGE}:temp-$CI_PIPELINE_IID"

  script:

    - drr registry.cyberbrain.pw/docker/hello-world

##########################################################################################################

#### RELEASE SECTION

release:

  <<: *common

  stage: release

    - ${CI_REGISTRY_IMAGE}:temp-${CI_COMMIT_SHORT_SHA}

  stage: test

  variables:

    GIT_STRATEGY: "none"

  services:

    - registry.cyberbrain.pw/docker/dind

  only:

    - /^trunk$/

    - /^staging$/

    - /^master$/

  script:

    - export VERSION_OLD=temp-$CI_PIPELINE_IID

    - export VERSION_NEW=$CI_COMMIT_REF_SLUG

    - test $CI_COMMIT_REF_SLUG = "master" && { export VERSION_NEW=latest; }

    - echo "Running [$VERSION_NEW] release from [$VERSION_OLD] build!"

    - docker pull $CI_REGISTRY_IMAGE:$VERSION_OLD && ( docker tag $CI_REGISTRY_IMAGE:$VERSION_OLD $CI_REGISTRY_IMAGE:$VERSION_NEW && docker push $CI_REGISTRY_IMAGE:$VERSION_NEW ) || true

    - docker login -u gitlab-ci-token -p $CI_BUILD_TOKEN $CI_REGISTRY

    - alias drr="docker run --rm -v \${PWD}:\${PWD} -w \${PWD}"

    - drr ${HELLOWORLD_IMAGE}