name: Auto Build Alpine-Edge Docker Container
enable-email-notifications: true

on:
  workflow_dispatch:
  schedule:
    - cron: '16 1 * * *'

jobs:
  build:
    runs-on: dind

    env:
      PACKAGE: alpine-edge
      DOCKER_REGISTRY: git.shork.ch
      REGISTRY_USER: docker-images
      COMMIT_AUTHOR_NAME: "forgejo-runner"
      COMMIT_AUTHOR_EMAIL: "forgejo-runner@shork.ch"
      COMMIT_MESSAGE: "Update build metadata"
      REPO_URL: "https://dl-cdn.alpinelinux.org/alpine/edge/releases/x86_64"
      YAML_FILE: "latest-releases.yaml"
      IMAGE_NAME: "alpine-edge-minirootfs"


    steps:
      - name: Install dependencies
        shell: sh
        run: |
          echo "Run because of ${{ github.event_name }}"
          apk add --no-cache git nodejs npm bash sed curl jq yq #$PACKAGE

      - uses: actions/checkout@v3
  
      - name: Get latest package version
        run: |
          FILENAME=$(curl -s "$REPO_URL/$YAML_FILE" | yq -r ".[] | select(.flavor == \"alpine-minirootfs\") | .file")
          NEWEST_VERSION=$(echo "$FILENAME" | sed 's/^alpine-minirootfs-//; s/-x86_64\.tar\.gz$//')
          echo "NEWEST_VERSION=$NEWEST_VERSION" >> $GITHUB_ENV
          echo "FILENAME=$FILENAME" >> $GITHUB_ENV

      - name: Determine if update is needed
        run: |
          last_version_file=".last_version"
          last_dockerfile_hash_file=".dockerfile_hash"

          last_version=$(cat $last_version_file 2>/dev/null || echo "none")
          last_dockerfile_hash=$(cat $last_dockerfile_hash_file 2>/dev/null || echo "none")
          dockerfile_hash=$(sha256sum Dockerfile | awk '{print $1}' || echo "nuh")

          update="false"
          if [ ${{ github.event_name }} == "workflow_dispatch" ] || [ "$last_version" != "$NEWEST_VERSION" ] || [ "$last_dockerfile_hash" != "$dockerfile_hash" ]; then
            update="true"
          fi

          echo "UPDATE=$update" >> $GITHUB_ENV
          echo "DOCKERFILE_HASH=$dockerfile_hash" >> $GITHUB_ENV

      - name: Start Docker daemon
        if: env.UPDATE == 'true'
        run: |
          dockerd-entrypoint.sh &
          for i in {1..10}; do
            docker info && break
            echo "Waiting for Docker daemon..."
            sleep 3
          done
          docker info || { echo "Docker daemon failed to start."; exit 1; }

      - name: Get and verify Buildfiles
        if: env.UPDATE == 'true'
        run: |
          curl -LOs "$REPO_URL/$FILENAME"
          curl -LOs "$REPO_URL/$FILENAME.sha512"
          sha512sum -c $FILENAME.sha512

          sed -i "s|^ADD \$FILENAME /|ADD $FILENAME /|" Dockerfile


      - name: Build and push Docker image
        if: env.UPDATE == 'true'
        run: |
          docker build --build-arg NPROC=1 -t $DOCKER_REGISTRY/$REGISTRY_USER/$PACKAGE:latest -t $DOCKER_REGISTRY/$REGISTRY_USER/$PACKAGE:$NEWEST_VERSION .
          echo "${{ secrets.DOCKER_PASSWORD }}" | docker login $DOCKER_REGISTRY -u $REGISTRY_USER --password-stdin
          docker push --all-tags $DOCKER_REGISTRY/$REGISTRY_USER/$PACKAGE
          echo "$NEWEST_VERSION" > .last_version
          echo "$DOCKERFILE_HASH" > .dockerfile_hash
    
      - name: Commit updated metadata
        if: env.UPDATE == 'true'
        run: |
          git config user.name "$COMMIT_AUTHOR_NAME"
          git config user.email "$COMMIT_AUTHOR_EMAIL"
          git add .last_version .dockerfile_hash
          git commit -m "$COMMIT_MESSAGE" || echo "No commit"
          git push