Merge pull request #1 from mattclay/init

Inititial setup.

Author: mattclay

Dockerfile

@@ -0,0 +1,12 @@
+FROM quay.io/bedrock/alpine:3.16.2 AS builder
+
+RUN apk --no-cache add gcc audit-dev musl-dev
+
+COPY audit-status.c .
+RUN gcc -o audit-status audit-status.c -l audit
+
+FROM quay.io/bedrock/alpine:3.16.2
+
+RUN apk --no-cache add audit-libs
+
+COPY --from=builder /audit-status /usr/local/bin/audit-status

audit-status.c

@@ -0,0 +1,6 @@
+#include <stdio.h>
+#include <libaudit.h>
+
+int main() {
+    printf("%d\n", audit_request_status(audit_open()));
+}

azure-pipelines.yml

@@ -0,0 +1,75 @@
+trigger:
+  batch: true
+  branches:
+    include:
+      - main
+      - stable-*
+  tags:
+    include:
+      - '*'
+
+pr:
+  branches:
+    include:
+      - main
+      - stable-*
+
+pool:
+  vmImage: 'ubuntu-20.04'
+
+variables:
+  container_name: "quay.io/ansible/$(System.TeamProject)"
+  scratchpad_tag: "quay.io/ansible/scratchpad:$(System.TeamProject)-$(Build.SourceBranchName)-$(Build.BuildId)"
+  python_version: '3.10'
+  containmint_version: '0.2.0'
+  ${{ if ne(variables['Build.Reason'], 'PullRequest') }}:
+    push_or_no_login: --push
+  ${{ else }}:
+    push_or_no_login: --no-login
+
+stages:
+  - stage: Build
+    dependsOn: []
+    jobs:
+      - job: Arch
+        steps:
+          - task: UsePythonVersion@0
+            inputs:
+              versionSpec: '$(python_version)'
+            displayName: Use Python
+          - script: pip install containmint==$(containmint_version) --disable-pip-version-check --user
+            displayName: Install containmint
+          - script: >
+              containmint build
+              --tag "$(scratchpad_tag)-$(System.JobName)"
+              --arch "$(System.JobName)"
+              $(push_or_no_login)
+            displayName: Build
+            env:
+              CONTAINMINT_PASSWORD: $(CONTAINMINT_PASSWORD)
+        strategy:
+          matrix:
+            x86_64: {}
+            aarch64: {}
+
+  - stage: Deploy
+    dependsOn: Build
+    condition: and(succeeded(), ne(variables['Build.Reason'], 'PullRequest'))
+    jobs:
+      - job: Image
+        steps:
+          - task: UsePythonVersion@0
+            inputs:
+              versionSpec: '$(python_version)'
+            displayName: Use Python
+          - script: pip install containmint==$(containmint_version) --disable-pip-version-check --user
+            displayName: Install containmint
+          - script: >
+              containmint merge
+              --push
+              --tag "$(container_name):$(Build.SourceBranchName)"
+              "$(scratchpad_tag)-x86_64"
+              "$(scratchpad_tag)-aarch64"
+            displayName: Merge
+            env:
+              CONTAINMINT_PASSWORD: $(CONTAINMINT_PASSWORD)