.gitlab-ci.yml

stages:
  - requirements
  - build
  - deploy

build_container:
  image: docker:27
  stage: requirements
  tags:
    - docker
  services:
    - docker:27-dind
  retry: 2
  variables:
    IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
  script:
    - echo "$CI_REGISTRY_PASSWORD" | docker login $CI_REGISTRY -u $CI_REGISTRY_USER --password-stdin
    - docker build -t $IMAGE_TAG .
    - docker push $IMAGE_TAG
  only:
    changes:
      - Dockerfile

build_packages:
  stage: build
  image: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
  tags:
    - docker
  script:
    - cd bind9
    - elastic-package check # lint and build the package
  retry: 2
  artifacts:
    paths:
      - build/*
    expire_in: 1 day

deploy:
  image: alpine
  stage: deploy
  tags:
    - docker
  before_script:
  - 'command -v ssh-agent >/dev/null || ( apk add --update openssh )' 
  - eval $(ssh-agent -s)
  - chmod 400 "$SSH_PRIVATE_KEY"
  - ssh-add $SSH_PRIVATE_KEY
  - mkdir -p ~/.ssh
  - chmod 700 ~/.ssh
  - ssh-keyscan $EPR_ADDRESS >> ~/.ssh/known_hosts
  - chmod 644 ~/.ssh/known_hosts
  script:
  - scp -r build/packages/* $SSH_USER@$EPR_ADDRESS:/var/package-registry/packages
  - ssh $SSH_USER@$EPR_ADDRESS "systemctl restart package-registry"
  dependencies:
    - build_packages