first draft

.github/workflows/docker-publish.yml

@@ -0,0 +1,73 @@
+name: Docker
+
+on:
+ push:
+
+ # Publish `v1.2.3` tags as releases.
+ tags:
+ - v*
+
+ # Run tests for any PRs.
+ pull_request:
+
+env:
+ # TODO: Change variable to your image's name.
+ IMAGE_NAME: vault-util
+
+jobs:
+ # Run tests.
+ # See also https://docs.docker.com/docker-hub/builds/automated-testing/
+ # test:
+ # runs-on: ubuntu-latest
+
+ # steps:
+ # - uses: actions/checkout@v2
+
+ # - name: Run tests
+ # run: |
+ # if [ -f docker-compose.test.yml ]; then
+ # docker-compose --file docker-compose.test.yml build
+ # docker-compose --file docker-compose.test.yml run sut
+ # else
+ # docker build . --file Dockerfile
+ # fi
+
+ # Push image to GitHub Packages.
+ # See also https://docs.docker.com/docker-hub/builds/
+ push:
+ # Ensure test job passes before pushing image.
+ #needs: test
+
+ runs-on: ubuntu-latest
+ if: github.event_name == 'push'
+
+ steps:
+ - uses: actions/checkout@v2
+
+ - name: Build image
+ run: docker build . --file Dockerfile --tag $IMAGE_NAME
+
+ - name: Log into GitHub Container Registry
+ run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login https://ghcr.io -u ${{ github.actor }} --password-stdin
+
+ - name: Push image to GitHub Container Registry
+ run: |
+ IMAGE_ID=ghcr.io/${{ github.repository_owner }}/$IMAGE_NAME
+
+ # Change all uppercase to lowercase
+ IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')
+
+ # Strip git ref prefix from version
+ VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
+
+ # Strip "v" prefix from tag name
+ [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
+
+ # Use Docker `latest` tag convention
+ [ "$VERSION" == "master" ] && VERSION=latest
+
+ echo IMAGE_ID=$IMAGE_ID
+ echo VERSION=$VERSION
+
+ docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
+ docker push $IMAGE_ID:$VERSION

Dockerfile

@@ -0,0 +1,16 @@
+FROM ubuntu:20.04
+ARG VAULT_VERSION=1.13.1
+
+# Update apt and Install dependencies
+RUN apt-get update && apt install software-properties-common -y && add-apt-repository ppa:rmescandon/yq -y \
+ && apt update && DEBIAN_FRONTEND=noninteractive TZ=Etc/UTC apt-get install -y \
+ tzdata \
+ curl \
+ dnsutils \
+ git \
+ jq \
+ yq \
+ zip \
+ && rm -rf /var/lib/apt/lists/*
+ && wget -O /tmp/vault.zip https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip \
+ && unzip /tmp/vault.zip -d /tmp && mv /tmp/vault /usr/local/bin/vault && chmod +x /usr/local/bin/vault