docker.yaml

# TODO(a.garipov):  Refactor this workflow.
'name': Docker
# Permissions are disabled for all the jobs by default, and then overridden for
# specific jobs if needed.  This is a recommended practice for security reasons,
# and also allows to avoid mistakes with permissions when creating new jobs.
#
# See https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#permissions.
'permissions': {}
'env':
  'GO_VERSION': '1.26.4'
'on':
  'push':
    'tags':
      - 'v*'
    # Builds from the master branch will be pushed with the `dev` tag.
    'branches':
      - 'master'
'jobs':
  'docker':
    'if': |
      ${{ github.repository_owner != 'AdGuardSoftwareLimited' }}
    'permissions':
      'contents': 'read'
    'runs-on': 'ubuntu-latest'
    'steps':
      - 'name': 'Checkout'
        'uses': 'actions/checkout@v6'
        'with':
          # Set to false to avoid  GITHUB_TOKEN leaking.
          #
          # See https://github.com/actions/checkout/issues/485#issuecomment-934422611.
          'persist-credentials': false
      - 'name': 'Set up Go'
        'uses': 'actions/setup-go@v6'
        'with':
          'go-version': '${{ env.GO_VERSION }}'
      - 'name': 'Set up Go modules cache'
        'uses': 'actions/cache@v4'
        'with':
          'path': '~/go/pkg/mod'
          'key': "${{ runner.os }}-go-${{ hashFiles('go.sum') }}"
          'restore-keys': '${{ runner.os }}-go-'
      - 'name': 'Set up QEMU'
        'uses': 'docker/setup-qemu-action@v3'
      - 'name': 'Set up Docker Buildx'
        'uses': 'docker/setup-buildx-action@v3'
        'with':
          'install': true
      - 'name': 'Publish to Docker Hub'
        'env':
          'DOCKER_USER': ${{ secrets.DOCKER_USER }}
          'DOCKER_PASSWORD': ${{ secrets.DOCKER_PASSWORD }}
        'run': |-
          set -e -u -x

          docker login \
              -u="${DOCKER_USER}" \
              -p="${DOCKER_PASSWORD}" \
              ;

          make \
              DOCKER_IMAGE_NAME='adguard/dnsproxy' \
              DOCKER_PUSH='1' \
              VERBOSE='1' \
              docker \
              ;