forgejo-actions-probe/.forgejo/workflows/image-build.yaml

name: Image Build Probe

on:
  push:
    paths:
      - ".forgejo/workflows/image-build.yaml"
      - "Dockerfile"
  workflow_dispatch:

env:
  REGISTRY: forgejo.coulomb.social
  IMAGE_NAME: coulomb/forgejo-actions-probe
  DOCKER_HOST: tcp://127.0.0.1:2375

jobs:
  image-build:
    runs-on: container-build
    steps:
      - name: Build and push image
        env:
          REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
          REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
        run: |
          set -eu
          apk add --no-cache git 2>/dev/null || true
          if ! command -v git >/dev/null 2>&1; then
            echo "git unavailable; using inline build context"
            mkdir -p buildctx
            echo forgejo-image-build-probe-ok > buildctx/probe.txt
            printf 'FROM alpine:3.20\nCOPY probe.txt /\n' > buildctx/Dockerfile
          else
            git clone --depth 1 "https://forgejo.coulomb.social/${GITHUB_REPOSITORY}.git" buildctx
            cd buildctx
          fi
          mkdir -p "${HOME}/bin"
          wget -qO- https://download.docker.com/linux/static/stable/x86_64/docker-27.3.1.tgz             | tar xz --strip-components=1 -C "${HOME}/bin" docker/docker
          export PATH="${HOME}/bin:${PATH}"
          docker version
          echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" -u "${REGISTRY_USER}" --password-stdin
          TAG="${GITHUB_SHA:-manual}"
          SHORT="${TAG:0:7}"
          IMAGE="${REGISTRY}/${IMAGE_NAME}"
          CTX="${PWD}"
          if [ -d buildctx ]; then CTX="${PWD}/buildctx"; fi
          docker build -t "${IMAGE}:latest" -t "${IMAGE}:${SHORT}" "${CTX}"
          docker push "${IMAGE}:latest"
          docker push "${IMAGE}:${SHORT}"
          echo "pushed ${IMAGE}:latest and ${IMAGE}:${SHORT}"