ci: align CD workflow names and image tags

2026-10-02 14:41:42 +02:00
1 parent 2a063481a6
commit 0c605c4dfb
@@ -0,0 +1,108 @@
+name: CD Production
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+env:
+  REGISTRY: docker.lechner-systems.at
+  IMAGE_NAME: lechnersystems/maintenance
+
+jobs:
+  image:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7.0.1
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4.4.1
+
+      - name: Log in to registry
+        env:
+          REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
+          REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
+        run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
+
+      - name: Build and push production image
+        uses: docker/build-push-action@v7.4.0
+        with:
+          context: .
+          push: true
+          provenance: false
+          build-args: |
+            APP_VERSION=${{ gitea.sha }}
+            VCS_REF=${{ gitea.sha }}
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:Release
+          labels: |
+            org.opencontainers.image.version=${{ gitea.sha }}
+            org.opencontainers.image.revision=${{ gitea.sha }}
+            org.opencontainers.image.source=${{ gitea.repositoryUrl }}
+
+  release:
+    needs: image
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7.0.1
+        with:
+          fetch-depth: 0
+
+      - name: Create or update Gitea release
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          GITEA_API_URL: ${{ gitea.api_url }}
+          GITEA_REPOSITORY: ${{ gitea.repository }}
+          GITEA_SERVER_URL: ${{ gitea.server_url }}
+          GITEA_SHA: ${{ gitea.sha }}
+        shell: bash
+        run: |
+          version="$(git rev-parse --short=12 "$GITEA_SHA")"
+          if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then
+            echo "Invalid git hash version: $version" >&2
+            exit 1
+          fi
+
+          release_tag="v$version"
+          releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases"
+          auth_header="Authorization: token $GITEA_TOKEN"
+          previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" '[.[] | select(.draft == false and .prerelease == false and .tag_name != $tag)][0].tag_name // empty')"
+
+          if [ -n "$previous_tag" ]; then
+            commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
+            full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag"
+          else
+            commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")"
+            full_changelog=""
+          fi
+
+          if [ -z "$commit_messages" ]; then
+            commit_messages="- No commits since the previous release"
+          fi
+
+          {
+            echo '## Changes'
+            echo
+            printf '%s\n' "$commit_messages"
+            echo
+            if [ -n "$full_changelog" ]; then
+              echo "**Full Changelog**: $full_changelog"
+            fi
+          } > release-notes.md
+
+          payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: false}' release-notes.md)"
+          status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")"
+
+          if [ "$status" = 200 ]; then
+            release_id="$(jq -r '.id' release.json)"
+            curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id"
+          elif [ "$status" = 404 ]; then
+            curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url"
+          else
+            cat release.json
+            exit 1
+          fi