Build docker images using github actions

Author: TheEpicBlock

.github/workflows/botfest.yml

@@ -40,6 +40,11 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     if: github.ref == 'refs/heads/prod'
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -50,9 +55,21 @@ jobs:
       - name: Build project and generate docker file
         run: ./gradlew botfest:createDockerfile
 
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+
       - name: Build and push docker image
         uses: docker/build-push-action@v6
         with:
           context: "botfest/build"
           push: true
-          tags: modfest/botfest:latest
+          tags: ghcr.io/modfest/botfest:latest
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/panel.yml

@@ -17,6 +17,11 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/prod'
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -28,10 +33,15 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+
       - name: Build and push docker image
         uses: docker/build-push-action@v6
         with:
           context: "."
           file: "panel/Dockerfile"
           push: true
-          tags: modfest/platform_api:latest
+          tags: ghcr.io/modfest/panel:latest
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/platform_api.yml

@@ -40,6 +40,11 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     if: github.ref == 'refs/heads/prod'
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -50,9 +55,21 @@ jobs:
       - name: Build project and generate docker file
         run: ./gradlew platform_api:createDockerfile
 
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+
       - name: Build and push docker image
         uses: docker/build-push-action@v6
         with:
           context: "platform_api/build"
           push: true
-          tags: modfest/platform_api:latest
+          tags: ghcr.io/modfest/platform_api:latest
+          labels: ${{ steps.meta.outputs.labels }}

panel/Dockerfile

@@ -42,8 +42,6 @@ ENV NODE_ENV=production
 RUN addgroup --system --gid 1001 nodejs
 RUN adduser --system --uid 1001 nextjs
 
-COPY --from=builder /app/panel/public ./public
-
 # Automatically leverage output traces to reduce image size
 # https://nextjs.org/docs/advanced-features/output-file-tracing
 COPY --from=builder --chown=nextjs:nodejs /app/panel/.next/standalone ./

platform_api/build.gradle.kts

@@ -93,7 +93,7 @@ tasks.bootRun {
 	)
 }
 
-tasks.createDockerfile { dependsOn("bootBuildImage") }
+tasks.createDockerfile { dependsOn("bootJar") }
 docker {
 	generateOnBuild = false
 
@@ -109,19 +109,25 @@ docker {
 
 		runShell("groupadd --system --gid 1001 platform")
 		runShell("useradd --system --gid 1001 --uid 1001 platform")
+		runShell("mkdir -p /app")
+		runShell("chown platform /app")
+
 		user("platform")
 
 		workdir("/app")
 
-		val filename = tasks.bootBuildImage.get().archiveFile.get()
+		val filename = tasks.bootJar.get().archiveFile.get()
 			.asFile.relativeTo(dockerfileLocation.parentFile)
 		copy("$filename", "/app/app.jar")
 
-		runShell("mkdir -p /var/lib/platform/data")
+		runShell("mkdir -p /app/data")
 
-		env {
-			add("SERVER_PORT", "8080")
-		}
+		add(object : DockerfileCommand() {
+			override val keyword: String
+				get() = "ENV"
+
+			override fun toString(): String = "ENV SERVER_PORT=8080 PLATFORM_DATADIR=/app/data"
+		})
 
 		expose(8080)
 		entryPointExec(