ci: container-deployment-ci-cd

.github/workflows/container-build.yml

@@ -0,0 +1,83 @@
+name: BUILD PUSH DOCKER IMAGE
+
+permissions:
+    contents: read
+    packages: write
+
+on:
+    push:
+        branches: ["master"]
+        tags:
+            - "v*.*.*"
+    pull_request:
+        branches: ["master"]
+
+env:
+    IMAGE_NAME: sentinel
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+
+            - name: Set up Docker Buildx
+              uses: docker/setup-buildx-action@v3
+
+            - name: Log in to Docker Hub
+              if: github.event_name != 'pull_request'
+              uses: docker/login-action@v3
+              with:
+                  username: ${{ secrets.DOCKERHUB_USERNAME }}
+                  password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+            - name: Log in to GitHub Container Registry
+              if: github.event_name != 'pull_request'
+              uses: docker/login-action@v3
+              with:
+                  registry: ghcr.io
+                  username: ${{ github.actor }}
+                  password: ${{ secrets.GITHUB_TOKEN }}
+
+            - name: Extract Docker metadata
+              id: meta
+              uses: docker/metadata-action@v5
+              with:
+                  images: |
+                      ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}
+                      ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
+                  tags: |
+                      type=ref,event=branch
+                      type=ref,event=pr
+                      type=semver,pattern={{version}}
+                      type=semver,pattern={{major}}.{{minor}}
+                      type=semver,pattern={{major}}
+                      type=sha,prefix=sha-
+                      type=raw,value=latest,enable={{is_default_branch}}
+
+            - name: Build and push Docker image
+              uses: docker/build-push-action@v6
+              with:
+                  context: .
+                  file: ./Dockerfile
+                  platforms: linux/amd64,linux/arm64
+                  push: ${{ github.event_name != 'pull_request' }}
+                  tags: ${{ steps.meta.outputs.tags }}
+                  labels: ${{ steps.meta.outputs.labels }}
+                  cache-from: type=gha
+                  cache-to: type=gha,mode=max
+
+            - name: Print image details
+              if: github.event_name != 'pull_request'
+              run: |
+                  echo "Images pushed:"
+                  echo "${{ steps.meta.outputs.tags }}"
+                  echo ""
+                  echo "Docker Hub: https://hub.docker.com/r/${{ secrets.DOCKERHUB_USERNAME }}/${{ env.IMAGE_NAME }}"
+                  echo "GitHub: https://github.com/${{ github.repository }}/pkgs/container/${{ env.IMAGE_NAME }}"
+
+            - name: Test Docker image
+              run: |
+                  docker pull ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:latest || true
+                  docker run --rm ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:latest --version || echo "Image test skipped"

Dockerfile

@@ -2,14 +2,18 @@ FROM golang:1.21-alpine AS builder
 
 WORKDIR /build
 
-RUN apk add --no-cache git make
+RUN apk add --no-cache git make build-base
 
 COPY go.mod go.sum ./
 RUN go mod download
 
 COPY . .
 
-RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -ldflags '-extldflags "-static"' -o sentinel .
+RUN CGO_ENABLED=1 GOOS=linux go build \
+    -a \
+    -installsuffix cgo \
+    -ldflags '-extldflags "-static"' \
+    -o sentinel .
 
 FROM alpine:latest