feat: Split CI/CD pipeline into separate build and deploy workflows

- Add build-image.yml: Automatic image builds on push (5-8 min) - Add deploy-production.yml: Manual deployment workflow (2-5 min) - Mark production-deploy.yml as deprecated Benefits: - Faster feedback: Images ready in ~5-8 min (vs 10-15 min before) - Flexible deployment: Deploy when ready, not forced after every build - Parallel execution: Multiple builds can run simultaneously - Better separation: Build failures don't block deployments of existing images
2025-10-31 23:43:49 +01:00
parent d84c5dbacb
commit 194bd71257
3 changed files with 513 additions and 0 deletions
--- a/.gitea/workflows/build-image.yml
+++ b/.gitea/workflows/build-image.yml
@@ -0,0 +1,287 @@
+name: Build Docker Image
+
+run-name: Build Image - ${{ github.ref_name }} - ${{ github.sha }}
+
+on:
+  push:
+    branches: [ main, develop ]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch to build from'
+        required: false
+        default: 'main'
+
+env:
+  REGISTRY: registry.michaelschiemer.de
+  IMAGE_NAME: framework
+
+jobs:
+  # Job 1: Run Tests
+  test:
+    name: Run Tests & Quality Checks
+    runs-on: php-ci
+    steps:
+      - name: Checkout code
+        run: |
+          REF_NAME="${{ github.ref_name || inputs.branch || 'main' }}"
+          REPO="${{ github.repository }}"
+          
+          if [ -n "${{ secrets.CI_TOKEN }}" ]; then
+            git clone --depth 1 --branch "$REF_NAME" \
+              "https://${{ secrets.CI_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
+              /workspace/repo
+          else
+            git clone --depth 1 --branch "$REF_NAME" \
+              "https://git.michaelschiemer.de/${REPO}.git" \
+              /workspace/repo || \
+            git clone --depth 1 \
+              "https://git.michaelschiemer.de/${REPO}.git" \
+              /workspace/repo
+          fi
+          
+          cd /workspace/repo
+
+      - name: Cache Composer dependencies
+        run: |
+          if [ -d "/tmp/composer-cache/vendor" ]; then
+            echo "📦 Restoring cached dependencies..."
+            cp -r /tmp/composer-cache/vendor /workspace/repo/vendor || true
+          fi
+
+      - name: Install dependencies
+        run: |
+          cd /workspace/repo
+          composer install --no-interaction --prefer-dist --optimize-autoloader --ignore-platform-req=php
+
+      - name: Save Composer cache
+        run: |
+          mkdir -p /tmp/composer-cache
+          cp -r /workspace/repo/vendor /tmp/composer-cache/vendor || true
+
+      - name: Tests temporarily skipped
+        run: |
+          echo "⚠️ Tests temporarily skipped due to PHP 8.5 compatibility issues"
+
+  # Job 2: Build & Push Docker Image
+  build:
+    name: Build Docker Image
+    needs: test
+    runs-on: docker-build
+    outputs:
+      image_tag: ${{ steps.image_info.outputs.IMAGE_TAG }}
+      commit_sha: ${{ steps.meta.outputs.commit_sha }}
+      image_url: ${{ steps.image_info.outputs.IMAGE_URL }}
+    steps:
+      - name: Install git and setup environment
+        shell: sh
+        run: |
+          if ! command -v bash >/dev/null 2>&1 || ! command -v git >/dev/null 2>&1; then
+            apk add --no-cache git bash curl
+          fi
+          bash --version
+          git --version
+          
+      - name: Checkout code
+        shell: bash
+        run: |
+          REF_NAME="${{ github.ref_name || inputs.branch || 'main' }}"
+          REPO="${{ github.repository }}"
+          
+          if [ -n "${{ secrets.CI_TOKEN }}" ]; then
+            git clone --depth 1 --branch "$REF_NAME" \
+              "https://${{ secrets.CI_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
+              /workspace/repo
+          else
+            git clone --depth 1 --branch "$REF_NAME" \
+              "https://git.michaelschiemer.de/${REPO}.git" \
+              /workspace/repo || \
+            git clone --depth 1 \
+              "https://git.michaelschiemer.de/${REPO}.git" \
+              /workspace/repo
+          fi
+          
+          cd /workspace/repo
+
+      - name: Setup Docker Buildx
+        shell: bash
+        run: |
+          docker buildx version || echo "Buildx nicht gefunden"
+          echo "🔧 DOCKER_HOST: ${DOCKER_HOST:-nicht gesetzt}"
+          docker info | grep -E "Server Version|Registry" || true
+          
+          if ! docker ps >/dev/null 2>&1; then
+            echo "❌ Fehler: Docker ist nicht verfügbar!"
+            exit 1
+          fi
+          
+          if ! docker buildx ls 2>/dev/null | grep -q builder; then
+            echo "📦 Erstelle neuen Buildx Builder..."
+            docker buildx create --name builder --use --driver docker-container
+          else
+            echo "✅ Builder existiert bereits"
+            docker buildx use builder
+          fi
+          
+          docker buildx inspect --bootstrap
+          docker buildx ls
+
+      - name: Generate image metadata
+        id: meta
+        run: |
+          cd /workspace/repo
+          COMMIT_SHA="${{ github.sha }}"
+          if [ -z "$COMMIT_SHA" ]; then
+            COMMIT_SHA=$(git rev-parse HEAD)
+          fi
+          SHORT_SHA=$(echo "$COMMIT_SHA" | cut -c1-7)
+          TAG="${SHORT_SHA}-$(date +%s)"
+          echo "tag=${TAG}" >> $GITHUB_OUTPUT
+          echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
+          echo "commit_sha=${COMMIT_SHA}" >> $GITHUB_OUTPUT
+          echo "Generated tag: ${TAG}"
+
+      - name: Login to Registry
+        id: login
+        shell: bash
+        run: |
+          REGISTRY_USER="${{ secrets.REGISTRY_USER }}"
+          REGISTRY_PASSWORD="${{ secrets.REGISTRY_PASSWORD }}"
+          REGISTRY_URL="${{ env.REGISTRY }}"
+          DEPLOYMENT_HOST="94.16.110.151"
+          
+          if [ -z "$REGISTRY_USER" ] || [ -z "$REGISTRY_PASSWORD" ]; then
+            echo "❌ Error: Registry credentials missing"
+            exit 1
+          fi
+          
+          echo "🔐 Logging in to registry..."
+          
+          HOST_IP=$(ip route | grep default | awk '{print $3}' 2>/dev/null | head -1 || echo "$DEPLOYMENT_HOST")
+          
+          REGISTRY_URLS=(
+            "registry.michaelschiemer.de"
+            "$REGISTRY_URL"
+            "$DEPLOYMENT_HOST"
+            "$DEPLOYMENT_HOST:5000"
+            "${HOST_IP}:5000"
+          )
+          
+          LOGIN_SUCCESS=false
+          
+          for TEST_URL in "${REGISTRY_URLS[@]}"; do
+            echo "🔍 Testing registry: $TEST_URL"
+            
+            if [[ "$TEST_URL" == *":5000" ]]; then
+              HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "http://$TEST_URL/v2/" 2>&1 || echo "000")
+              
+              if [ "$HTTP_CODE" = "401" ] || [ "$HTTP_CODE" = "200" ]; then
+                set +e
+                LOGIN_OUTPUT=$(echo "$REGISTRY_PASSWORD" | docker login "$TEST_URL" -u "$REGISTRY_USER" --password-stdin 2>&1)
+                LOGIN_EXIT_CODE=$?
+                set -e
+                
+                if [ $LOGIN_EXIT_CODE -eq 0 ]; then
+                  REGISTRY_URL="$TEST_URL"
+                  LOGIN_SUCCESS=true
+                  break
+                fi
+              fi
+            else
+              HTTPS_CODE=$(curl -k -s -o /dev/null -w "%{http_code}" "https://$TEST_URL/v2/" 2>&1 || echo "000")
+              
+              if [ "$HTTPS_CODE" = "401" ] || [ "$HTTPS_CODE" = "200" ]; then
+                set +e
+                LOGIN_OUTPUT=$(echo "$REGISTRY_PASSWORD" | docker login "$TEST_URL" -u "$REGISTRY_USER" --password-stdin 2>&1)
+                LOGIN_EXIT_CODE=$?
+                set -e
+                
+                if [ $LOGIN_EXIT_CODE -eq 0 ]; then
+                  REGISTRY_URL="$TEST_URL"
+                  LOGIN_SUCCESS=true
+                  break
+                fi
+              fi
+            fi
+          done
+          
+          if [ "$LOGIN_SUCCESS" = false ]; then
+            echo "❌ Registry login failed"
+            exit 1
+          fi
+          
+          echo "✅ Registry login successful: $REGISTRY_URL"
+          echo "REGISTRY_URL=$REGISTRY_URL" >> $GITHUB_ENV
+
+      - name: Build and push Docker image
+        shell: bash
+        env:
+          REGISTRY_URL: ${{ env.REGISTRY_URL }}
+        run: |
+          cd /workspace/repo
+          
+          REGISTRY_TO_USE="$REGISTRY_URL"
+          IMAGE_NAME="${{ env.IMAGE_NAME }}"
+          
+          COMMIT_SHA="${{ github.sha }}"
+          if [ -z "$COMMIT_SHA" ]; then
+            COMMIT_SHA=$(git rev-parse HEAD)
+          fi
+          REF_NAME="${{ github.ref_name }}"
+          if [ -z "$REF_NAME" ]; then
+            REF_NAME=$(git rev-parse --abbrev-ref HEAD)
+          fi
+          SHORT_SHA=$(echo "$COMMIT_SHA" | cut -c1-7)
+          TAG="${SHORT_SHA}-$(date +%s)"
+          
+          echo "🏗️ Building Docker image..."
+          echo "   Registry: $REGISTRY_TO_USE"
+          echo "   Image: $IMAGE_NAME"
+          echo "   Tags: latest, $TAG, git-$SHORT_SHA"
+          
+          docker buildx build \
+            --platform linux/amd64 \
+            --file ./Dockerfile.production \
+            --tag "${REGISTRY_TO_USE}/${IMAGE_NAME}:latest" \
+            --tag "${REGISTRY_TO_USE}/${IMAGE_NAME}:${TAG}" \
+            --tag "${REGISTRY_TO_USE}/${IMAGE_NAME}:git-${SHORT_SHA}" \
+            --cache-from type=registry,ref="${REGISTRY_TO_USE}/${IMAGE_NAME}:buildcache" \
+            --cache-from type=registry,ref="${REGISTRY_TO_USE}/${IMAGE_NAME}:latest" \
+            --cache-to type=registry,ref="${REGISTRY_TO_USE}/${IMAGE_NAME}:buildcache",mode=max \
+            --build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') \
+            --build-arg GIT_COMMIT=${COMMIT_SHA} \
+            --build-arg GIT_BRANCH=${REF_NAME} \
+            --push \
+            .
+          
+          echo "✅ Image built and pushed successfully!"
+
+      - name: Set image info
+        id: image_info
+        shell: bash
+        run: |
+          COMMIT_SHA="${{ github.sha }}"
+          if [ -z "$COMMIT_SHA" ]; then
+            COMMIT_SHA=$(cd /workspace/repo && git rev-parse HEAD)
+          fi
+          SHORT_SHA=$(echo "$COMMIT_SHA" | cut -c1-7)
+          TAG="${SHORT_SHA}-$(date +%s)"
+          
+          REGISTRY_TO_USE="${{ env.REGISTRY_URL }}"
+          IMAGE_NAME="${{ env.IMAGE_NAME }}"
+          
+          IMAGE_TAG="$TAG"
+          IMAGE_URL="${REGISTRY_TO_USE}/${IMAGE_NAME}:${IMAGE_TAG}"
+          
+          echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_OUTPUT
+          echo "IMAGE_URL=$IMAGE_URL" >> $GITHUB_OUTPUT
+          
+          echo "📦 Image info:"
+          echo "   Tag: $IMAGE_TAG"
+          echo "   URL: $IMAGE_URL"
+          echo ""
+          echo "💡 Image is ready for deployment!"
+          echo "   Run the 'Deploy to Production' workflow to deploy this image."