cv/.drone.yml
Arnie cf431b4344
Some checks failed
continuous-integration/drone/tag Build is failing
Use new cmd for nix builds
2024-10-21 12:48:29 +02:00

93 lines
1.9 KiB
YAML

---
kind: pipeline
name: CI/CD
trigger:
ref:
- refs/tags/*
volumes:
- name: deps
temp: {}
- name: dockersock
temp: {}
steps:
- name: notify-start
image: appleboy/drone-discord
settings:
webhook_id:
from_secret: DISCORD_WEBHOOK_ID
webhook_token:
from_secret: DISCORD_WEBHOOK_TOKEN
message: "Started build: https://drone.cechis.cz/c3c/cv/{{ build.number }}"
- name: build
image: nixos/nix
volumes:
- name: deps
path: /nix/store
commands:
- nix --extra-experimental-features nix-command --extra-experimental-features flakes build .#image
- name: publish
image: docker:dind
environment:
REGISTRY_PASSWORD:
from_secret: registry_password
REGISTRY_USER:
from_secret: registry_user
volumes:
- name: deps
path: /nix/store
- name: dockersock
path: /var/run
commands:
- sleep 5
- ./result | docker load
- echo $$REGISTRY_PASSWORD | docker login -u $$REGISTRY_USER --password-stdin dr.cechis.cz
- docker tag cv:${DRONE_TAG} dr.cechis.cz/c3c/cv:${DRONE_TAG}
- docker push dr.cechis.cz/c3c/cv:${DRONE_TAG}
depends_on:
- build
- name: deploy
image: appleboy/drone-ssh
settings:
host: vps-1.cechis.cz
command_timeout: 20m
username: drone
key:
from_secret: SSH_DRONE
script:
- docker service update --quiet --with-registry-auth --detach=false --image dr.cechis.cz/c3c/cv:${DRONE_TAG} c3c-cv
depends_on:
- publish
- name: notify-end
image: appleboy/drone-discord
settings:
webhook_id:
from_secret: DISCORD_WEBHOOK_ID
webhook_token:
from_secret: DISCORD_WEBHOOK_TOKEN
message: "C3C CV build: {{ build.number }} - {{ build.status }}"
when:
status: [ success, failure ]
depends_on:
- deploy
services:
- name: docker
image: docker:dind
privileged: true
volumes:
- name: dockersock
path: /var/run
---
kind: signature
hmac: 2107c756fde64e7781e7ca7a6f047efd94dbe12d095e8da06e7f9ef0747f6cf9
...