---
name: Build Autoupdater Image

concurrency:
  group: build-image
  cancel-in-progress: false

on:
  schedule:
    # Monthly. Arch is a rolling release, so a month-old image is a month
    # behind on packages; :latest is overwritten each time.
    - cron: "0 3 1 * *"
  push:
    branches:
      - main
    paths:
      - dockerfile
      - .dockerignore
      - .gitea/workflows/build-image.yaml
  workflow_dispatch:

defaults:
  run:
    shell: bash

jobs:
  build:
    # No Arch needed here -- this only drives docker. The *image* is Arch.
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Log in to the Gitea container registry
        env:
          GIT_HOST: ${{ vars.GIT_HOST }}
          REGISTRY_USER: ${{ vars.REGISTRY_USER }}
          GIT_TOKEN: ${{ secrets.GIT_TOKEN }}
        run: |
          set -euo pipefail
          # NB: this is the Gitea *username*, not vars.GIT_NAME -- that one is
          # the display name used for git commit authorship and contains spaces.
          printf '%s' "${GIT_TOKEN}" \
            | docker login "${GIT_HOST}" \
                --username "${REGISTRY_USER}" \
                --password-stdin

      - name: Build and push
        env:
          GIT_HOST: ${{ vars.GIT_HOST }}
        run: |
          set -euo pipefail
          # The repo is `.autoupdate`, but OCI names cannot start with a dot.
          image="${GIT_HOST}/aur/autoupdate"

          # --pull so a monthly rebuild actually picks up a new archlinux base
          # rather than reusing a cached one.
          docker build --pull --tag "${image}:latest" .
          docker push "${image}:latest"

          echo "pushed ${image}:latest"

      - name: Log out
        if: always()
        env:
          GIT_HOST: ${{ vars.GIT_HOST }}
        run: docker logout "${GIT_HOST}" || true