nfoguard/.gitea/workflows/ci-dev.yml

name: Docker Build & Deploy (DEV)

on:
  push:
    branches: [ dev ]
  pull_request:
    branches: [ dev ]

jobs:
  build-dev:
    runs-on: host
    
    steps:
    - name: Checkout code (DEV)
      run: |
        echo "Current workspace: $(pwd)"
        
        # Clean workspace first
        rm -rf * .git* 2>/dev/null || true
        
        # Clone the repository since Gitea runner doesn't auto-checkout
        echo "Cloning repository..."
        git clone http://${{ secrets.username }}:${{ secrets.token }}@192.168.253.221:3000/jskala/NFOguard.git /tmp/repo
        cp -r /tmp/repo/* .
        cp -r /tmp/repo/.* . 2>/dev/null || true
        rm -rf /tmp/repo
        
        echo "Repository cloned successfully"
        ls -la
        echo "Checking Dockerfile:"
        head -30 Dockerfile

    - name: Check Docker availability (DEV)
      run: |
        echo "Checking Docker installation..."
        which docker || (echo "Docker not found in PATH" && exit 1)
        docker --version || (echo "Docker not available" && exit 1)
        docker info || (echo "Docker daemon not running" && exit 1)

    - name: Configure Docker for local registry (DEV)
      run: |
        echo "Configuring Docker client for insecure local registry..."
        LOCAL_REGISTRY="192.168.253.221:3000"
        
        export DOCKER_CONFIG=/tmp/docker-config-dev
        mkdir -p $DOCKER_CONFIG
        
        # Create Docker client config for insecure registry
        cat > $DOCKER_CONFIG/config.json << EOF
        {
          "auths": {},
          "HttpHeaders": {
            "User-Agent": "Docker-Client/20.10.0 (linux)"
          },
          "credsStore": "",
          "credHelpers": {},
          "experimental": "disabled"
        }
        EOF
        
        echo "Docker client config created for DEV"
        echo "Testing registry connectivity..."
        curl -s "http://$LOCAL_REGISTRY/v2/" && echo "✅ Registry accessible via HTTP" || echo "❌ Registry not accessible"

    - name: Build Docker image with caching (DEV)
      run: |
        echo "Building DEV Docker image with layer caching..."
        LOCAL_REGISTRY="192.168.253.221:3000"
        CACHE_IMAGE="$LOCAL_REGISTRY/jskala/nfoguard:dev-buildcache"
        
        # Clear any existing Docker configs to prevent permission issues
        unset DOCKER_CONFIG
        export HOME=/tmp/docker-home-dev
        mkdir -p $HOME
        
        # Enable Docker BuildKit for better caching
        export DOCKER_BUILDKIT=1
        
        # Check if DEV cache image exists and pull it
        echo "Checking for existing DEV cache image..."
        CACHE_ARGS=""
        if curl -s "http://$LOCAL_REGISTRY/v2/jskala/nfoguard/manifests/dev-buildcache" > /dev/null 2>&1; then
          echo "✅ DEV cache manifest found, pulling image..."
          if docker pull "$CACHE_IMAGE" 2>/dev/null; then
            echo "✅ DEV cache image pulled successfully"
            CACHE_ARGS="--cache-from=$CACHE_IMAGE"
          else
            echo "⚠️ DEV cache manifest exists but pull failed"
          fi
        else
          echo "ℹ️ No DEV cache image found (first build or cache expired)"
        fi
        
        # Build DEV image with cache (if available)
        echo "Building DEV image with layer caching..."
        docker build \
          $CACHE_ARGS \
          --tag nfoguard:dev \
          --tag nfoguard:dev-${{ github.sha }} \
          --tag "$CACHE_IMAGE" \
          .
        
        echo "DEV Docker image built and tagged successfully"

    - name: Login and Push to Gitea registry (DEV tags)
      continue-on-error: true
      run: |
        echo "Using LOCAL IP ONLY for DEV push!"
        export DOCKER_CONFIG=/tmp/docker-config-dev
        
        LOCAL_REGISTRY="192.168.253.221:3000"
        echo "Registry: $LOCAL_REGISTRY (DEV TAGS)"
        
        # Try login to local registry
        if echo "${{ secrets.token }}" | docker --config $DOCKER_CONFIG login "$LOCAL_REGISTRY" -u "${{ secrets.username }}" --password-stdin 2>/dev/null; then
          echo "✅ DEV Login succeeded"
          
          # Tag for local registry
          docker tag nfoguard:dev "$LOCAL_REGISTRY/jskala/nfoguard:dev"
          docker tag nfoguard:dev "$LOCAL_REGISTRY/jskala/nfoguard:dev-${{ github.sha }}"
          
          # Push DEV images
          echo "=== Pushing DEV cache image ==="
          timeout 60 docker --config $DOCKER_CONFIG push "$LOCAL_REGISTRY/jskala/nfoguard:dev-buildcache" && echo "✅ DEV cache pushed" || echo "⚠️ DEV cache push failed"
          
          echo "=== Pushing DEV latest tag ==="
          if timeout 120 docker --config $DOCKER_CONFIG push "$LOCAL_REGISTRY/jskala/nfoguard:dev"; then
            echo "✅ DEV tag pushed successfully"
            
            if timeout 60 docker --config $DOCKER_CONFIG push "$LOCAL_REGISTRY/jskala/nfoguard:dev-${{ github.sha }}"; then
              echo "✅ DEV SHA tag pushed successfully"
            fi
          fi
        else
          echo "❌ DEV local registry login failed - continuing to Docker Hub"
        fi

    - name: Push DEV to Docker Hub
      if: github.ref == 'refs/heads/dev'
      run: |
        echo "=== Pushing DEV image to Docker Hub ==="
        
        # Use temporary config directory to avoid permission issues
        export DOCKER_CONFIG=/tmp/docker-config-dev-hub
        mkdir -p $DOCKER_CONFIG
        
        if echo "${{ secrets.DOCKER_HUB_TOKEN }}" | docker --config $DOCKER_CONFIG login -u "${{ secrets.DOCKER_HUB_USERNAME }}" --password-stdin; then
          echo "✅ Docker Hub login successful"
          
          DOCKER_HUB_REPO="sbcrumb/nfoguard"
          
          # Tag and push dev image
          docker tag nfoguard:dev "$DOCKER_HUB_REPO:dev"
          docker tag nfoguard:dev "$DOCKER_HUB_REPO:dev-${{ github.sha }}"
          
          echo "=== Pushing DEV tags to Docker Hub ==="
          if timeout 300 docker --config $DOCKER_CONFIG push "$DOCKER_HUB_REPO:dev"; then
            echo "✅ DEV tag pushed to Docker Hub"
            
            if timeout 180 docker --config $DOCKER_CONFIG push "$DOCKER_HUB_REPO:dev-${{ github.sha }}"; then
              echo "✅ DEV SHA tag pushed to Docker Hub"
            else
              echo "⚠️ DEV SHA tag push failed"
            fi
          else
            echo "❌ Failed to push DEV to Docker Hub"
            exit 1
          fi
          
          echo ""
          echo "🎉 DEV image available on Docker Hub!"
          echo "📦 DEV image: sbcrumb/nfoguard:dev"
        else
          echo "❌ Docker Hub login failed for DEV push"
          exit 1
        fi