Merge branch 'master' of github.com:scrtlabs/secret-ai-fetch-agent

Author: alexh-scrt

.github/workflows/docker-build-secretvm.yml

@@ -0,0 +1,95 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+    tags: "v[0-9]+.[0-9]+.[0-9]+"
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Get the version
+        id: get_version
+        run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
+
+      - name: Set lowercase repository name
+        id: set_repo
+        run: echo "REPO_NAME=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_OUTPUT
+
+      - name: Log in to GitHub Container Registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+
+      - name: Build Docker image
+        id: build
+        run: |
+          docker build -t ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:latest -f Dockerfile .
+
+
+      - name: Push Docker image
+        id: push
+        run: |
+          # Push latest first
+          docker push ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:latest
+          # Tag with version and push
+          docker tag ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:latest ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:${{ steps.get_version.outputs.VERSION }}
+          docker push ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:${{ steps.get_version.outputs.VERSION }}
+
+          # Get the manifest digest after pushing
+          MANIFEST_DIGEST=$(docker inspect ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:latest --format='{{index .RepoDigests 0}}' | cut -d'@' -f2 | cut -d':' -f2)
+          echo "IMAGE_HASH=${MANIFEST_DIGEST}" >> $GITHUB_OUTPUT          
+
+      - name: Generate docker-compose-secretvm.yaml
+        run: |
+          cat > docker-compose-secretvm.yaml << EOL
+          # Release: https://github.com/${{ github.repository }}/releases/tag/${{ steps.get_version.outputs.VERSION }}
+          # Workflow URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          # Commit: https://github.com/${{ github.repository }}/commit/${{ github.sha }}
+          version: '3'
+          services:
+            app:
+              image: ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}@sha256:${{ steps.push.outputs.IMAGE_HASH }}
+              ports:
+                - '8000:8000'
+          EOL
+
+      - name: Commit docker-compose-secretvm.yaml
+        run: |
+          # Fetch all branches
+          git fetch origin
+          
+          # Get the branch where the workflow file was committed
+          BRANCH_NAME="${{ github.event.repository.default_branch }}"
+          
+          # Checkout the branch
+          git checkout $BRANCH_NAME
+          
+          # Configure git
+          git config user.name github-actions
+          git config user.email [email protected]
+          
+          # Add and commit changes
+          git add docker-compose-secretvm.yaml
+          if git diff --staged --quiet; then
+            echo "No changes to commit"
+          else
+            git commit -m "Update docker-compose-secretvm.yaml for version ${{ steps.get_version.outputs.VERSION }}"
+            git push origin $BRANCH_NAME
+          fi
+
+      - name: Output Image URL
+        run: |
+          echo "IMAGE_URL=ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:${{ steps.get_version.outputs.VERSION }}" >> $GITHUB_OUTPUT
+          echo "WORKFLOW_ID=${{ github.run_id }}" >> $GITHUB_OUTPUT
+
+      - name: Notify Workflow Status
+        if: always()
+        run: |
+          echo "Workflow Status: ${{ job.status }}"
+          echo "Image URL: ghcr.io/${{ steps.set_repo.outputs.REPO_NAME }}:${{ steps.get_version.outputs.VERSION }}"
+          echo "Workflow ID: ${{ github.run_id }}"