build & deploy image to gcr

Author: Mikhail Khomenko

.github/workflows/build-push-gcr.yaml

@@ -0,0 +1,34 @@
+name: Build & Publish Image to GCR
+
+on:
+  push:
+    branches:
+    - master
+
+env:
+  PROJECT_ID:   hackathon-297608
+  GCR_LOCATION: eu.gcr.io
+  IMAGE_NAME:   ${{ github.repository }}
+  GITHUB_SHA:   ${{ github.sha }}
+
+jobs:
+  gcloud-install-build-push-GCR:
+    name: Add gcloud, Build & Publish
+    runs-on: ubuntu-18.04
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v2
+
+    - name: Setup gcloud cli
+      uses: google-github-actions/[email protected]
+      with:
+        version: '290.0.1'
+        service_account_key: ${{ secrets.GCR_SERVICE_ACCOUNT_KEY }}
+
+    - name: Build & Publish
+      run: |
+        gcloud auth configure-docker
+        export TAG=${GCR_LOCATION}/${PROJECT_ID}/$(echo ${IMAGE_NAME,,} | tr '/' '-'):${GITHUB_SHA}
+        docker build --tag ${TAG} .
+        docker push ${TAG}
+

Dockerfile

@@ -21,6 +21,7 @@ RUN mkdir -p /tmp/deps \
 USER ${ISC_PACKAGE_MGRUSER}
 
 COPY  Installer.cls .
+COPY  post_start_hook .
 COPY  src src
 COPY iris.script iris.script
 

post_start_hook

@@ -0,0 +1,14 @@
+#!/bin/bash -e
+set -o pipefail
+
+/bin/echo -e ""                                                                                                                                          \
+  " set sc = ##class(Security.Users).UnExpireUserPasswords(\"*\")"                                                                                       \
+  " if '\$Get(sc) { do ##class(%SYSTEM.Process).Terminate(, 1) }"                                                                                        \
+  " set sc = ##class(SYS.Container).ChangePassword(\"/etc/iris-secrets/iris-password\")"                                                                  \
+  " if '\$Get(sc) { do ##class(%SYSTEM.Process).Terminate(, 1) }"                                                                                        \
+  " set sc = ##class(SYS.Container).ChangeGatewayMgrPassword(\"/etc/iris-secrets/iris-password\")"                                                        \
+  " if '\$Get(sc) { do ##class(%SYSTEM.Process).Terminate(, 1) }"                                                                                        \
+  " halt"                                                                                                                                                \
+| iris session ${ISC_PACKAGE_INSTANCENAME} -U %SYS
+
+iris stop ${ISC_PACKAGE_INSTANCENAME} restart quietly