DockerBuild: auto-select Dockerfile.win2022 for Windows Server 2022 hosts

Also: TeamCity uses matches for Windows agent requirement

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: gfraiteur

DockerBuild.ps1

@@ -420,6 +420,35 @@ function Get-TimestampFile
     return $timestampFile
 }
 
+function Get-ContentHash {
+    param(
+        [string]$DockerfilePath,
+        [string]$ContextDirectory
+    )
+
+    $hashInput = Get-Content $DockerfilePath -Raw -ErrorAction SilentlyContinue
+    if (-not $hashInput) { $hashInput = "" }
+
+    # Add context files (excluding generated .g/ directory)
+    $contextFiles = Get-ChildItem $ContextDirectory -Recurse -File -ErrorAction SilentlyContinue |
+        Where-Object { $_.FullName -notmatch '[/\\]\.g[/\\]' } |
+        Sort-Object FullName
+
+    foreach ($file in $contextFiles) {
+        $content = Get-Content $file.FullName -Raw -ErrorAction SilentlyContinue
+        if ($content) {
+            $hashInput += "`n--- $($file.Name) ---`n"
+            $hashInput += $content
+        }
+    }
+
+    $hashBytes = [System.Security.Cryptography.SHA256]::Create().ComputeHash(
+        [System.Text.Encoding]::UTF8.GetBytes($hashInput)
+    )
+    # Use 8 bytes (16 hex chars) for uniqueness
+    return [System.BitConverter]::ToString($hashBytes, 0, 8).Replace("-", "").ToLower()
+}
+
 # Dictionary to track volume mounts with "writable wins" logic
 $script:VolumeMountDict = @{}
 
@@ -464,6 +493,22 @@ if (-not $Dockerfile)
     {
         $Dockerfile = "Dockerfile"
     }
+
+    # On Windows, detect if we're running on Server 2022 (build < 26100) and use matching Dockerfile
+    # Windows Server 2025 is build 26100+, 2022 is build 20348-26099
+    if ($IsWindows -and -not $Claude)
+    {
+        $osBuild = [System.Environment]::OSVersion.Version.Build
+        if ($osBuild -lt 26100)
+        {
+            $win2022Dockerfile = "Dockerfile.win2022"
+            if (Test-Path (Join-Path $PSScriptRoot $win2022Dockerfile))
+            {
+                Write-Host "Detected Windows Server 2022 (build $osBuild), using $win2022Dockerfile" -ForegroundColor Cyan
+                $Dockerfile = $win2022Dockerfile
+            }
+        }
+    }
 }
 
 # Get the full path of the Dockerfile
@@ -476,19 +521,21 @@ else
     $dockerfileFullPath = Join-Path $PSScriptRoot $Dockerfile
 }
 
-# Generate a hash of the Dockerfile full path (4 bytes, 8 hex chars)
-$hashBytes = (New-Object -TypeName System.Security.Cryptography.SHA256Managed).ComputeHash([System.Text.Encoding]::UTF8.GetBytes($dockerfileFullPath))
-$dockerfileHash = [System.BitConverter]::ToString($hashBytes, 0, 4).Replace("-", "").ToLower()
+# Generate content-based hash for image tag
+$contentHash = Get-ContentHash -DockerfilePath $dockerfileFullPath -ContextDirectory $dockerContextDirectory
+$ghcrRegistry = $env:GHCR_REGISTRY
 
-# Generate ImageTag using the hash
-if ( [string]::IsNullOrEmpty($ImageName))
-{
-    $ImageTag = "dockerfile-$dockerfileHash"
-    Write-Host "Generated image tag from Dockerfile path hash: $ImageTag" -ForegroundColor Cyan
+if ($ghcrRegistry) {
+    # GHCR mode: use registry URL with content hash
+    $ImageTag = "${ghcrRegistry}:${contentHash}"
+    Write-Host "GHCR image tag: $ImageTag" -ForegroundColor Cyan
 }
-else
-{
-    $ImageTag = "$ImageName`:$dockerfileHash"
+elseif ([string]::IsNullOrEmpty($ImageName)) {
+    $ImageTag = "dockerfile-$contentHash"
+    Write-Host "Generated image tag from content hash: $ImageTag" -ForegroundColor Cyan
+}
+else {
+    $ImageTag = "$ImageName`:$contentHash"
     Write-Host "Image will be tagged as: $ImageTag" -ForegroundColor Cyan
 }
 
@@ -1148,6 +1195,47 @@ if (-not $existingContainerId)
     }
 }
 
+# GHCR authentication and pull logic
+$builtNewImage = $false
+$dockerConfigArg = @()
+
+if ($ghcrRegistry -and -not $NoBuildImage -and -not $existingContainerId) {
+    # Extract registry host from full URL (e.g., ghcr.io from ghcr.io/owner/repo)
+    $registryHost = ($ghcrRegistry -split '/')[0]
+
+    # Create a temporary Docker config directory to avoid credential helper issues
+    # (e.g., docker-credential-desktop not found when using Docker Engine without Desktop)
+    $tempDockerConfig = Join-Path $env:TEMP "docker-config-$(New-Guid)"
+    New-Item -ItemType Directory -Path $tempDockerConfig -Force | Out-Null
+    @{ auths = @{} } | ConvertTo-Json | Set-Content (Join-Path $tempDockerConfig "config.json")
+    $dockerConfigArg = @("--config", $tempDockerConfig)
+
+    # Authenticate to GHCR
+    $ghcrToken = $env:GHCR_TOKEN
+    if ($ghcrToken) {
+        Write-Host "Authenticating to GHCR..." -ForegroundColor Gray
+        # GHCR accepts any username when using a PAT, commonly 'github' is used
+        $ghcrToken | docker @dockerConfigArg login $registryHost --username github --password-stdin 2>$null
+        if ($LASTEXITCODE -ne 0) {
+            Write-Host "Warning: GHCR authentication failed. Pull/push may fail." -ForegroundColor Yellow
+        }
+    }
+    else {
+        Write-Host "Warning: GHCR_TOKEN not set. GHCR pull/push may fail." -ForegroundColor Yellow
+    }
+
+    # Try to pull the image
+    Write-Host "Checking GHCR for existing image: $ImageTag" -ForegroundColor Cyan
+    docker @dockerConfigArg pull $ImageTag 2>$null
+    if ($LASTEXITCODE -eq 0) {
+        Write-Host "Using cached image from GHCR." -ForegroundColor Green
+        $NoBuildImage = $true
+    }
+    else {
+        Write-Host "Image not found in GHCR, will build locally." -ForegroundColor Yellow
+    }
+}
+
 # Building the image.
 if (-not $NoBuildImage -and -not $existingContainerId)
 {
@@ -1221,6 +1309,20 @@ RUN if [ -n "`$MOUNTPOINTS" ]; then \
         Write-Host "Docker build failed with exit code $LASTEXITCODE" -ForegroundColor Red
         exit $LASTEXITCODE
     }
+
+    $builtNewImage = $true
+
+    # Auto-push to GHCR after successful build
+    if ($ghcrRegistry) {
+        Write-Host "Pushing image to GHCR: $ImageTag" -ForegroundColor Cyan
+        docker @dockerConfigArg push $ImageTag
+        if ($LASTEXITCODE -ne 0) {
+            Write-Host "Warning: Failed to push image to GHCR" -ForegroundColor Yellow
+        }
+        else {
+            Write-Host "Successfully pushed to GHCR" -ForegroundColor Green
+        }
+    }
 }
 else
 {

Dockerfile.win2022

@@ -0,0 +1,93 @@
+# escape=`
+
+# This file is auto-generated by PostSharp.Engineering.
+
+FROM mcr.microsoft.com/windows/servercore:ltsc2022
+
+# The initial shell is Windows PowerShell (use full path to avoid HCS issues)
+SHELL ["C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", "-Command"]
+
+# Prepare environment
+ENV PSExecutionPolicyPreference=Bypass
+ENV POWERSHELL_UPDATECHECK=Off
+ENV TEMP=C:\Temp
+ENV TMP=C:\Temp
+ENV RUNNING_IN_DOCKER=TRUE
+
+# Set locale for consistent behavior regardless of host locale
+ENV LANG=C.UTF-8
+ENV LC_ALL=C.UTF-8
+ENV DOTNET_CLI_UI_LANGUAGE=en
+ENV VSLANG=1033
+
+# Set base PATH explicitly to avoid issues with expansion
+ENV PATH="C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0"
+
+# Enable long path support
+RUN Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem' -Name 'LongPathsEnabled' -Value 1
+
+
+
+# Install Git
+RUN Invoke-WebRequest -Uri https://github.com/git-for-windows/git/releases/download/v2.50.0.windows.1/PortableGit-2.50.0-64-bit.7z.exe -OutFile PortableGit.exe; `
+    Start-Process -FilePath .\PortableGit.exe -ArgumentList '-o"C:\git"', '-y' -Wait; `
+    Remove-Item PortableGit.exe
+
+# Add git to PATH using ENV directive (persists across shell switches)
+ENV PATH="C:\git\cmd;C:\git\bin;C:\git\usr\bin;${PATH}"
+
+RUN git config --system core.longpaths true
+
+# Set CLAUDE_CODE_GIT_BASH_PATH for Claude Code
+ENV CLAUDE_CODE_GIT_BASH_PATH=C:\git\bin\bash.exe
+
+
+# Install PowerShell 7
+RUN Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v7.5.2/PowerShell-7.5.2-win-x64.msi -OutFile PowerShell.msi; `
+    $process = Start-Process msiexec.exe -Wait -PassThru -ArgumentList '/I PowerShell.msi /quiet'; `
+    if ($process.ExitCode -ne 0) { exit $process.ExitCode }; `
+    Remove-Item PowerShell.msi
+
+ENV PATH="C:\Program Files\PowerShell\7;${PATH}"
+
+
+# Download .NET Installer
+RUN Invoke-WebRequest -Uri https://dot.net/v1/dotnet-install.ps1 -OutFile dotnet-install.ps1
+
+# Add .NET to PATH using ENV directive (persists across shell switches)
+ENV PATH="C:\Program Files\dotnet;${PATH}"
+
+
+# Install .NET Sdk 9.0.310
+RUN & .\dotnet-install.ps1 -Version 9.0.310 -InstallDir 'C:\Program Files\dotnet'
+
+
+# Epilogue
+# Link to private repository for GHCR visibility
+LABEL org.opencontainers.image.source=https://github.com/postsharp/PostSharp.Engineering.Images
+
+# Create docker-context directory for build scripts
+RUN New-Item -ItemType Directory -Path c:\docker-context -Force | Out-Null
+
+# Create directories for mountpoints
+ARG MOUNTPOINTS
+RUN if ($env:MOUNTPOINTS) { `
+        $mounts = $env:MOUNTPOINTS -split ';'; `
+        foreach ($dir in $mounts) { `
+            if ($dir) { `
+                Write-Host "Creating directory $dir`."; `
+                New-Item -ItemType Directory -Path $dir -Force | Out-Null; `
+            } `
+        } `
+    }
+
+# Import environment variables
+COPY ReadEnvironmentVariables.ps1 c:\docker-context\ReadEnvironmentVariables.ps1
+COPY .g/env.g.json c:\docker-context\env.g.json
+RUN c:\docker-context\ReadEnvironmentVariables.ps1 c:\docker-context\env.g.json
+
+# Copy Init.g.ps1 placeholder (drive mappings handled inline in docker run)
+COPY .g/Init.g.ps1 c:\docker-context\Init.g.ps1
+
+# Configure .NET SDK
+ENV DOTNET_NOLOGO=1

src/PostSharp.Engineering.BuildTools/Docker/ContainerOperatingSystem.cs

@@ -0,0 +1,9 @@
+namespace PostSharp.Engineering.BuildTools.Docker;
+
+public enum ContainerOperatingSystem
+{
+    Windows2025,
+    Default = Windows2025,
+    Windows2022,
+    Linux
+}