add Dockerfile and build workflow for ghcr.io/ansforge/fhir-ig-builder

Colocating the Dockerfile in IG-workflows so the GITHUB_TOKEN
(scoped to ansforge) can push directly to ghcr.io/ansforge/.
Weekly cron rebuild picks up new SUSHI versions automatically.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: nriss

.github/workflows/build-docker.yml

@@ -0,0 +1,69 @@
+name: Build and Push FHIR IG Builder image
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - Dockerfile
+      - .github/workflows/build-docker.yml
+  schedule:
+    # Rebuild hebdomadaire lundi 06:00 UTC pour capter les nouvelles versions SUSHI
+    - cron: '0 6 * * 1'
+  workflow_dispatch:
+    inputs:
+      sushi_version:
+        description: 'Version SUSHI à installer (défaut : dernière stable)'
+        required: false
+        default: ''
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Resolve SUSHI version
+        id: sushi-version
+        shell: bash
+        run: |
+          if [ -n "${{ github.event.inputs.sushi_version }}" ]; then
+            VERSION="${{ github.event.inputs.sushi_version }}"
+          else
+            VERSION=$(npm view fsh-sushi version)
+          fi
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "SUSHI version: $VERSION"
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          build-args: SUSHI_VERSION=${{ steps.sushi-version.outputs.version }}
+          tags: |
+            ghcr.io/ansforge/fhir-ig-builder:latest
+            ghcr.io/ansforge/fhir-ig-builder:sushi-${{ steps.sushi-version.outputs.version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Verify image
+        run: |
+          docker run --rm ghcr.io/ansforge/fhir-ig-builder:latest sushi --version
+          docker run --rm ghcr.io/ansforge/fhir-ig-builder:latest java -version
+          docker run --rm ghcr.io/ansforge/fhir-ig-builder:latest jekyll --version
+          docker run --rm ghcr.io/ansforge/fhir-ig-builder:latest dot -V
+          docker run --rm ghcr.io/ansforge/fhir-ig-builder:latest python3 --version

Dockerfile

@@ -0,0 +1,51 @@
+FROM ubuntu:24.04
+
+ARG SUSHI_VERSION=3.20.0
+ARG NODE_MAJOR=20
+ENV DEBIAN_FRONTEND=noninteractive \
+    LANG=en_US.UTF-8 \
+    LC_ALL=en_US.UTF-8
+
+# System packages
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    curl \
+    wget \
+    git \
+    jq \
+    unzip \
+    graphviz \
+    python3 \
+    python3-pip \
+    ruby \
+    ruby-dev \
+    ruby-bundler \
+    build-essential \
+    openjdk-17-jdk-headless \
+    locales \
+    && locale-gen en_US.UTF-8 \
+    && rm -rf /var/lib/apt/lists/*
+
+# Node.js 20 via NodeSource
+RUN curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash - \
+    && apt-get install -y nodejs \
+    && rm -rf /var/lib/apt/lists/*
+
+# SUSHI (version épinglée via ARG — passer --build-arg SUSHI_VERSION=x.y.z pour mettre à jour)
+RUN npm install -g fsh-sushi@${SUSHI_VERSION}
+
+# Jekyll
+RUN gem install jekyll --no-document
+
+# GitHub CLI
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+      | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+      | tee /etc/apt/sources.list.d/github-cli.list \
+    && apt-get update && apt-get install -y gh \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN java -version && node --version && sushi --version && jekyll --version && dot -V && python3 --version
+
+WORKDIR /workspace