ci: rely on Docker GitHub Actions to leverage more features (#59)

cf. https://docs.docker.com/build/ci/github-actions/

Relying on GitHub Actions provided by Docker provide two main benefits:
* Automatic and easy cache management (https://docs.docker.com/build/ci/github-actions/cache/)
* Build summary (https://docs.docker.com/build/ci/github-actions/build-summary/)

Coupling with GitHub Actions and Docker's specific GHA is limited thanks to Docker Bake.

Author: Djaytan

.github/workflows/ci.yml

@@ -11,8 +11,9 @@ on:
 
 permissions: {}
 
+# TODO: Experiment GitHub deployments
 # TODO: do we want to test multi-arch build?
-# TODO: what about cache?
+# TODO: reproductible builds? https://docs.docker.com/build/ci/github-actions/reproducible-builds/
 jobs:
   build-and-test:
     name: Build & Test
@@ -66,13 +67,24 @@ jobs:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Build & Test
-        run: src/test/build-and-test.sh
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+
+      - name: Build
+        uses: docker/bake-action@4ba453fbc2db7735392b93edf935aaf9b1e8f747 # v6.5.0
+        with:
+          source: .
+          workdir: src/main/
+          targets: dev
+          load: true # Required for tests in later steps
+
+      - name: Test
+        run: src/test/test.sh
 
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
         with:
-          image-ref: djaytan/papermc-server:dev
+          image-ref: 'djaytan/papermc-server:dev'
           format: sarif
           output: results.sarif
 

src/main/Dockerfile

@@ -83,6 +83,7 @@ COPY --chown=papermc --chmod=500 runtime/start.sh ./
 EXPOSE 25565/tcp
 EXPOSE 25565/udp
 
+# TODO: Pre-launch server to pre-download Mojang's server jar for quick startup
 ENTRYPOINT ["./start.sh"]
 
 # TODO: healthcheck

src/test/build-dev.sh

@@ -4,7 +4,12 @@ set -Eeuo pipefail
 
 SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd -P)
 
-bash "$SCRIPT_DIR"/build-dev.sh
+cd "${SCRIPT_DIR}/../main"
+
+echo '🏗️ Building the DEV image...'
+docker buildx bake dev --print
+docker buildx bake dev
+echo '✅  Image built successfully.'
 
 echo '▶️ Starting the localdev PaperMC server...'
 docker run --rm -it -p 25565:25565/tcp -p 25565:25565/udp -e EULA=true 'djaytan/papermc-server:dev'

src/test/localdev.sh

@@ -1,11 +1,8 @@
 #!/usr/bin/env bash
+# Assumption: The OCI image is already built and tagged as 'djaytan/papermc-server:dev'
 
 set -Eeuo pipefail
 
-SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd -P)
-
-bash "$SCRIPT_DIR"/build-dev.sh
-
 CONTAINER_NAME='test-papermc-server'
 
 echo '📋 Testing the Docker PaperMC server image...'