Use docker compose v2 plugin (#1121) #151
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish Docker image and deploy it | |
| on: | |
| release: | |
| types: [published] | |
| push: | |
| branches: | |
| - main | |
| - develop | |
| env: | |
| image_name: lucyparsons/openoversight | |
| # env_name: 'prod' if ref_type is 'tag' indicating a release, otherwise 'staging' | |
| env_name: ${{ github.ref_type == 'tag' && 'prod' || 'staging' }} | |
| # docker_name: 'stable' if ref_type is 'tag', otherwise 'latest' | |
| docker_name: ${{ github.ref_type == 'tag' && 'stable' || 'latest' }} | |
| # release version if it is a release | |
| release_version: ${{ github.ref_type == 'tag' && github.ref_name || 'latest'}} | |
| python_version: "3.11" | |
| jobs: | |
| push_to_registry: | |
| name: Push Docker image to GitHub Packages | |
| runs-on: ubuntu-latest | |
| permissions: | |
| packages: write | |
| contents: read | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v3 | |
| - name: Log in to GitHub Docker Registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: https://ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build and push image | |
| uses: docker/build-push-action@v4 | |
| with: | |
| file: dockerfiles/web/Dockerfile-prod | |
| push: true | |
| build-args: PYTHON_VERSION=${{ env.python_version }} | |
| # Build the slimmer production target | |
| target: production | |
| tags: | | |
| ghcr.io/${{ env.image_name }}:${{ github.sha }} | |
| ghcr.io/${{ env.image_name }}:${{ env.docker_name }} | |
| ghcr.io/${{ env.image_name }}:${{ env.docker_name }}-py${{ env.python_version }} | |
| ghcr.io/${{ env.image_name }}:${{ env.release_version }} | |
| deploy: | |
| name: Deploy code to respective server | |
| needs: push_to_registry | |
| runs-on: ubuntu-latest | |
| permissions: | |
| packages: read | |
| defaults: | |
| run: | |
| shell: bash | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v3 | |
| - name: install fabric | |
| run: pip install fabric2 | |
| - name: setup ssh connection | |
| run: install -m 600 -D /dev/null ~/.ssh/id_ed25519 | |
| # choose SSH key depending on which environment we want to deploy to | |
| - name: ssh key staging | |
| if: ${{ env.env_name == 'staging' }} | |
| run: echo "${{secrets.SSH_STAGING_PRIVATE_KEY}}" > ~/.ssh/id_ed25519 | |
| - name: ssh key prod | |
| if: ${{ env.env_name == 'prod' }} | |
| run: echo "${{secrets.SSH_PROD_PRIVATE_KEY}}" > ~/.ssh/id_ed25519 | |
| # Next three steps use fabric2's "invoke" command which runs tasks defined in tasks.py | |
| - name: backup db | |
| run: invoke backup ${{ env.env_name }} | |
| - name: deploy | |
| run: invoke deploy ${{ env.env_name }} ${{ github.actor }} ${{ secrets.GITHUB_TOKEN }} ${{ github.ref_name }} | |
| - name: cleanup | |
| run: invoke cleanup ${{ env.env_name }} |