[CI] WiP build and publish docker image

Author: piotrekzyla

.github/workflows/demo_build_and_deploy.yml

@@ -0,0 +1,94 @@
+name: Docker build and publish
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+on:
+  push:
+    branches: [ deploy ]
+    # Publish semver tags as releases.
+    # tags: [ 'v*.*.*' ]
+
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+    #   id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+    #   # Install the cosign tool except on PR
+    #   # https://github.com/sigstore/cosign-installer
+    #   - name: Install cosign
+    #     if: github.event_name != 'pull_request'
+    #     uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 #v3.5.0
+    #     with:
+    #       cosign-release: 'v2.2.4'
+
+      # Set up BuildKit Docker container builder to be able to build
+      # multi-platform images and export cache
+      # https://github.com/docker/setup-buildx-action
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        # if: github.event_name != 'pull_request'
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # Extract metadata (tags, labels) for Docker
+      # https://github.com/docker/metadata-action
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      # Build and push Docker image with Buildx 
+      # https://github.com/docker/build-push-action
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      # Sign the resulting Docker image digest except on PRs.
+      # This will only write to the public Rekor transparency log when the Docker
+      # repository is public to avoid leaking data.  If you would like to publish
+      # transparency data even for private images, pass --force to cosign below.
+      # https://github.com/sigstore/cosign
+    #   - name: Sign the published Docker image
+    #     if: ${{ github.event_name != 'pull_request' }}
+    #     env:
+    #       # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+    #       TAGS: ${{ steps.meta.outputs.tags }}
+    #       DIGEST: ${{ steps.build-and-push.outputs.digest }}
+    #     # This step uses the identity token to provision an ephemeral certificate
+    #     # against the sigstore community Fulcio instance.
+    #     run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}

demos-docker/Dockerfile

@@ -0,0 +1,3 @@
+FROM nginx:1.27.5-alpine-slim
+COPY default.conf /etc/nginx/conf.d/default.conf
+COPY html /usr/share/nginx/html

demos-docker/default.conf

@@ -0,0 +1,35 @@
+server {
+    listen       80;
+    listen  [::]:80;
+    server_name  popcorn;
+
+    root /var/www/html;
+	index index.html;
+
+    location / {
+        add_header Cross-Origin-Opener-Policy "same-origin";
+        add_header Cross-Origin-Embedder-Policy "require-corp";
+        if ($request_uri ~ ^/(.*)\.html(\?|$)) {
+            return 302 /$1$is_args$args;
+        }
+        try_files $uri $uri.html $uri/ =404;
+    }
+
+    #access_log  /var/log/nginx/host.access.log  main;
+
+    location / {
+        root   /usr/share/nginx/html;
+        index  index.html index.htm;
+    }
+
+    #error_page  404              /404.html;
+
+    # redirect server error pages to the static page /50x.html
+    #
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+        root   /usr/share/nginx/html;
+    }
+
+}
+

demos-docker/html/elixir-docs/.build

@@ -0,0 +1,194 @@
+404.html
+Access.html
+Agent.html
+Application.html
+ArgumentError.html
+ArithmeticError.html
+Atom.html
+BadArityError.html
+BadBooleanError.html
+BadFunctionError.html
+BadMapError.html
+BadStructError.html
+Base.html
+Behaviour.html
+Bitwise.html
+Calendar.ISO.html
+Calendar.TimeZoneDatabase.html
+Calendar.UTCOnlyTimeZoneDatabase.html
+Calendar.html
+CaseClauseError.html
+Code.Fragment.html
+Code.LoadError.html
+Code.html
+Collectable.html
+CompileError.html
+CondClauseError.html
+Config.Provider.html
+Config.Reader.html
+Config.html
+Date.Range.html
+Date.html
+DateTime.html
+Dict.html
+Duration.html
+DynamicSupervisor.html
+Enum.EmptyError.html
+Enum.OutOfBoundsError.html
+Enum.html
+Enumerable.html
+ErlangError.html
+Exception.html
+File.CopyError.html
+File.Error.html
+File.LinkError.html
+File.RenameError.html
+File.Stat.html
+File.Stream.html
+File.html
+Float.html
+Function.html
+FunctionClauseError.html
+GenEvent.html
+GenServer.html
+HashDict.html
+HashSet.html
+IO.ANSI.html
+IO.Stream.html
+IO.StreamError.html
+IO.html
+Inspect.Algebra.html
+Inspect.Error.html
+Inspect.Opts.html
+Inspect.html
+Integer.html
+Kernel.ParallelCompiler.html
+Kernel.SpecialForms.html
+Kernel.TypespecError.html
+Kernel.html
+KeyError.html
+Keyword.html
+List.Chars.html
+List.html
+Macro.Env.html
+Macro.html
+Map.html
+MapSet.html
+MatchError.html
+MismatchedDelimiterError.html
+Module.html
+NaiveDateTime.html
+Node.html
+OptionParser.ParseError.html
+OptionParser.html
+PartitionSupervisor.html
+Path.html
+Port.html
+Process.html
+Protocol.UndefinedError.html
+Protocol.html
+Range.html
+Record.html
+Regex.CompileError.html
+Regex.html
+Registry.html
+RuntimeError.html
+Set.html
+Stream.html
+String.Chars.html
+String.html
+StringIO.html
+Supervisor.Spec.html
+Supervisor.html
+SyntaxError.html
+System.EnvError.html
+System.html
+SystemLimitError.html
+Task.Supervisor.html
+Task.html
+Time.html
+TokenMissingError.html
+TryClauseError.html
+Tuple.html
+URI.Error.html
+URI.html
+UndefinedFunctionError.html
+UnicodeConversionError.html
+Version.InvalidRequirementError.html
+Version.InvalidVersionError.html
+Version.Requirement.html
+Version.html
+WithClauseError.html
+agents.html
+alias-require-and-import.html
+anonymous-functions.html
+api-reference.html
+assets
+assets/kv-observer.png
+assets/logo.png
+assets/logo.png
+basic-types.html
+binaries-strings-and-charlists.html
+case-cond-and-if.html
+changelog.html
+code-anti-patterns.html
+compatibility-and-deprecations.html
+comprehensions.html
+config-and-releases.html
+debugging.html
+dependencies-and-umbrella-projects.html
+design-anti-patterns.html
+dist/AtomVM.js
+dist/AtomVM.wasm
+dist/eval.avm
+dist/html-KNMUZUZQ.js
+dist/html-elixir-PD7PAHEK.css
+dist/lato-latin-400-normal-W7754I4D.woff2
+dist/lato-latin-700-normal-2XVSBPG4.woff2
+dist/lato-latin-ext-400-normal-N27NCBWW.woff2
+dist/lato-latin-ext-700-normal-Q2L5DVMW.woff2
+dist/remixicon-NKANDIL5.woff2
+dist/search_data-EB331F8B.js
+dist/sidebar_items-3D721A5F.js
+distributed-tasks.html
+docs-tests-and-with.html
+domain-specific-languages.html
+dynamic-supervisor.html
+enum-cheat.html
+enumerable-and-streams.html
+erlang-libraries.html
+erlang-term-storage.html
+genservers.html
+gradual-set-theoretic-types.html
+index.html
+introduction-to-mix.html
+introduction.html
+io-and-the-file-system.html
+keywords-and-maps.html
+library-guidelines.html
+lists-and-tuples.html
+macro-anti-patterns.html
+macros.html
+module-attributes.html
+modules-and-functions.html
+naming-conventions.html
+operators.html
+optional-syntax.html
+pattern-matching.html
+patterns-and-guards.html
+process-anti-patterns.html
+processes.html
+protocols.html
+quote-and-unquote.html
+recursion.html
+search.html
+sigils.html
+structs.html
+supervisor-and-application.html
+syntax-reference.html
+task-and-gen-tcp.html
+try-catch-and-rescue.html
+typespecs.html
+unicode-syntax.html
+what-anti-patterns.html
+writing-documentation.html