.build.yml

image: archlinux
packages:
  - go
  - podman
  - buildah
  - passt
  - aardvark-dns
sources:
  - https://github.com/go-ap/authorize
secrets:
  - 3dcea276-38d6-4a7e-85e5-20cbc903e1ea
  - 3f30fd61-e33d-4198-aafb-0ff341e9db1c
tasks:
  - build: |
      test ${BUILD_SUBMITTER} != "git.sr.ht" && complete-build
      set +x
      cd authorize
      make all
  - tests: |
      cd authorize
      make test
  - push_to_github: |
      test ${BUILD_SUBMITTER} != "git.sr.ht" && complete-build
      set -a +x
      ssh-keyscan -H github.com >> ~/.ssh/known_hosts

      cd authorize
      git remote add hub git@github.com:go-ap/authorize
      git push hub --force --all
  - images: |
      set -a +x
      source ~/.buildah.env

      _user=$(id -un)

      echo 'unqualified-search-registries = ["docker.io"]' | sudo tee /etc/containers/registries.conf.d/unq-search.conf
      echo "${_user}:10000:65536" | sudo tee /etc/subuid
      echo "${_user}:10000:65536" | sudo tee /etc/subgid
      podman system migrate

      podman login -u="${BUILDAH_USER}" -p="${BUILDAH_SECRET}" quay.io

      set --
      cd authorize || exit

      _sha=$(git rev-parse --short HEAD)
      _branch=$(git branch --points-at=${_sha} | tail -n1 | tr -d '* ')
      _version=$(printf "%s-%s" "${_branch}" "${_sha}")

      make -C images cert builder
      _push() {
        _storage=${1:-all}
        make -C images STORAGE="${_storage}" VERSION="${_version}" ENV=dev push

        if [ "${_branch}" = "master" ]; then
            make -C images STORAGE="${_storage}" ENV=qa VERSION="${_version}" push
        fi

        _tag=$(git describe --long --tags || true)
        if [ -n "${_tag}" ]; then
          make -C images STORAGE="${_storage}" ENV=prod VERSION="${_tag}" push
        fi
      }
      _push
      _push fs
      # I guess I don't need everything while we're in heavy development
      #_push badger
      #_push boltdb
      #_push sqlite