name: docker-build-push

on:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  build-push:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      # act_runner's job container ships docker+dockerd but doesn't start the
      # daemon itself. This host's outer Docker uses overlay2, and overlay2
      # can't nest inside overlay2 (BuildKit mount fails with "invalid
      # argument"), so the inner daemon has to use vfs instead — slower, no
      # layer dedup, but the only storage driver that actually works nested
      # here.
      - name: Start Docker daemon (vfs storage driver)
        run: |
          dockerd --storage-driver=vfs > /tmp/dockerd.log 2>&1 &
          for i in $(seq 1 30); do
            docker info >/dev/null 2>&1 && break
            sleep 1
          done
          docker info >/dev/null 2>&1 || { cat /tmp/dockerd.log; exit 1; }

      - name: Build and push image
        env:
          REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
        run: |
          SHA="${{ github.sha }}"
          IMAGE="gitea.blairhaus.net/pmb/yttrx-welcomebot"

          docker build -t "$IMAGE:$SHA" -t "$IMAGE:latest" .
          printf '%s' "$REGISTRY_TOKEN" | docker login gitea.blairhaus.net -u pmb --password-stdin
          docker push "$IMAGE:$SHA"
          docker push "$IMAGE:latest"
          docker logout gitea.blairhaus.net

          echo "pushed $IMAGE:$SHA and $IMAGE:latest"