devcontainer/Taskfile.yml at main · schubergphilis/devcontainer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
version: "3"

# ##############################################################################
# VARIABLES
# ##############################################################################

vars:
  POLICIES_DIR: "policies"
  SOURCE_DIR: "src"

# ##############################################################################
# TASKS
# ##############################################################################

tasks:
  build:
    requires:
      vars:
        - PROJECT_BUILD_DATE
        - PROJECT_COMMIT
        - PROJECT_NAME
        - PROJECT_VERSION
        - PROJECT_DOCKER_PLATFORMS
        - DEFAULT_LANG
        - DEFAULT_USER_PRIMARY_GROUP
        - DEFAULT_USER_SECONDARY_GROUPS
        - DEFAULT_USER_SHELL
        - DEFAULT_USER
    cmds:
      - for: { var: PROJECT_DOCKER_PLATFORMS, split: "," }
        cmd: |
          arch="$(echo {{.ITEM}} | cut -d/ -f2)"
          docker build \
            --build-arg PROJECT_BUILD_DATE="{{.PROJECT_BUILD_DATE}}" \
            --build-arg PROJECT_COMMIT="{{.PROJECT_COMMIT}}" \
            --build-arg PROJECT_VERSION="{{.PROJECT_VERSION}}" \
            --build-arg DEFAULT_LANG="{{.DEFAULT_LANG}}" \
            --build-arg DEFAULT_USER_PRIMARY_GROUP="{{.DEFAULT_USER_PRIMARY_GROUP}}" \
            --build-arg DEFAULT_USER_SECONDARY_GROUPS="{{.DEFAULT_USER_SECONDARY_GROUPS}}" \
            --build-arg DEFAULT_USER_SHELL="{{.DEFAULT_USER_SHELL}}" \
            --build-arg DEFAULT_USER="{{.DEFAULT_USER}}" \
            --file "{{.SOURCE_DIR}}/Dockerfile" \
            --platform "{{.ITEM}}" \
            {{.PROJECT_DOCKER_EXTRA_ARGS}} \
            --tag "{{.PROJECT_NAME}}:{{.PROJECT_VERSION}}-$arch" \
            .

  clean:
    requires:
      vars:
        - PROJECT_NAME
    cmds:
      - docker images -q "{{.PROJECT_NAME}}" | sort | uniq | xargs docker rmi --force
      - docker images -q "{{.PROJECT_NAME}}-test" | sort | uniq | xargs docker rmi --force

  lint:
    cmds:
      - hadolint "{{.SOURCE_DIR}}/Dockerfile"
      - hadolint "{{.SOURCE_DIR}}/Dockerfile.test"

  release:
    requires:
      vars:
        - PROJECT_BUILD_DATE
        - PROJECT_COMMIT
        - PROJECT_DOCKER_HOST
        - PROJECT_DOCKER_ORG
        - PROJECT_DOCKER_REPOSITORY
        - PROJECT_NAME
        - PROJECT_VERSION
        - PROJECT_DOCKER_PLATFORMS
        - DEFAULT_LANG
        - DEFAULT_USER_PRIMARY_GROUP
        - DEFAULT_USER_SECONDARY_GROUPS
        - DEFAULT_USER_SHELL
        - DEFAULT_USER
    cmds:
      - |
        docker buildx build \
          --build-arg PROJECT_BUILD_DATE="{{.PROJECT_BUILD_DATE}}" \
          --build-arg PROJECT_COMMIT="{{.PROJECT_COMMIT}}" \
          --build-arg PROJECT_VERSION="{{.PROJECT_VERSION}}" \
          --build-arg DEFAULT_LANG="{{.DEFAULT_LANG}}" \
          --build-arg DEFAULT_USER_PRIMARY_GROUP="{{.DEFAULT_USER_PRIMARY_GROUP}}" \
          --build-arg DEFAULT_USER_SECONDARY_GROUPS="{{.DEFAULT_USER_SECONDARY_GROUPS}}" \
          --build-arg DEFAULT_USER_SHELL="{{.DEFAULT_USER_SHELL}}" \
          --build-arg DEFAULT_USER="{{.DEFAULT_USER}}" \
          --file "{{.SOURCE_DIR}}/Dockerfile" \
          --platform "{{.PROJECT_DOCKER_PLATFORMS}}" \
          --tag "{{.PROJECT_DOCKER_HOST}}/{{.PROJECT_DOCKER_ORG}}/{{.PROJECT_DOCKER_REPOSITORY}}:{{.PROJECT_VERSION}}" \
          --push \
          {{.PROJECT_DOCKER_EXTRA_ARGS}} \
          .

  scan:
    cmds:
      - |
        checkov \
          --file "{{.SOURCE_DIR}}/Dockerfile" \
          --external-checks-dir "{{.POLICIES_DIR}}" \
          --framework dockerfile \
          --output cli

  test:
    requires:
      vars:
        - PROJECT_NAME
        - PROJECT_VERSION
        - PROJECT_DOCKER_PLATFORMS
    cmds:
      - for: { var: PROJECT_DOCKER_PLATFORMS, split: "," }
        cmd: |
          arch="$(echo {{.ITEM}} | cut -d/ -f2)"
          docker build \
            --build-arg PROJECT_NAME="{{.PROJECT_NAME}}" \
            --build-arg PROJECT_VERSION="{{.PROJECT_VERSION}}-$arch" \
            --file "{{.SOURCE_DIR}}/Dockerfile.test" \
            --platform "{{.ITEM}}" \
            --tag "{{.PROJECT_NAME}}-test:$arch" \
            {{.PROJECT_DOCKER_EXTRA_ARGS}} \
            . \
          && docker run \
            --platform "{{.ITEM}}" \
            --rm \
            "{{.PROJECT_NAME}}-test:$arch"