feat: initial commit

- add Makefile
- add gitea workflows
- add Dockerfile
- pass through trusted ca certificates

.gitea/workflows/build.yaml

@@ -0,0 +1,29 @@
+name: Build
+
+on:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: almalinux-8
+    container:
+      image: docker:dind
+      options: --privileged
+      volumes:
+        - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt
+        - /etc/pki/tls/certs/ca-bundle.crt:/etc/ssl/certs/ca-certificates.crt
+        - /etc/pki/tls/certs/ca-bundle.crt:/etc/docker/certs.d/git.query.consul/ca.crt
+
+    steps:
+      - name: Set up environment
+        run: |
+          apk add --no-cache make bash git nodejs
+          cp /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+          update-ca-certificates
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Build Docker Image
+        run: |
+          make build

.gitea/workflows/deploy.yaml

@@ -0,0 +1,42 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  build:
+    runs-on: almalinux-8
+    container:
+      image: docker:dind
+      options: --privileged
+      volumes:
+        - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt
+        - /etc/pki/tls/certs/ca-bundle.crt:/etc/ssl/certs/ca-certificates.crt
+        - /etc/pki/tls/certs/ca-bundle.crt:/etc/docker/certs.d/git.query.consul/ca.crt
+
+    steps:
+      - name: Set up environment
+        run: |
+          apk add --no-cache make bash git nodejs
+          cp /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+          update-ca-certificates
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Build Docker Image
+        run: |
+          make build
+
+      - name: Log in to Docker
+        env:
+          UPLOAD_USER: ${{ secrets.UPLOAD_USER }}
+          UPLOAD_PASS: ${{ secrets.UPLOAD_PASS }}
+        run: |
+          echo "$UPLOAD_PASS" | docker login --username=$UPLOAD_USER --password-stdin git.query.consul
+
+      - name: Push Docker Image
+        run: |
+          make push

Dockerfile

@@ -0,0 +1,18 @@
+# Start with the AlmaLinux 8.10 base image
+FROM git.query.consul/unkin/almalinux8:latest
+
+# Clean and update the repository cache
+RUN dnf clean all && \
+    dnf makecache
+
+# Install nodejs:20 for actions
+RUN dnf module enable -y nodejs:20 && \
+    dnf install -y nodejs
+
+# Install build-essential
+RUN dnf groupinstall -y 'Development Tools' && \
+    dnf install -y make cmake gcc gcc-c++ rpm rpmdevtools wget
+
+# Cleanup
+RUN dnf clean all && \
+    rm -rf /var/cache/dnf

Makefile

@@ -0,0 +1,33 @@
+# Get the current Git commit hash
+GIT_COMMIT := $(shell git rev-parse --short HEAD)
+
+# Get the current date in YYYYMMDD format
+DATE_TAG := $(shell date +%Y%m%d)
+
+# Set the Docker image name and repository information
+IMAGE_NAME := alma8-buildagent
+REGISTRY := git.query.consul
+OWNER := unkin
+
+# Build the Docker image (without tags)
+build:
+	docker build --network=host -t $(REGISTRY)/$(OWNER)/$(IMAGE_NAME) .
+
+# Tag the Docker image with the Git commit hash, the date, and 'latest'
+tag:
+	docker tag $(REGISTRY)/$(OWNER)/$(IMAGE_NAME) $(REGISTRY)/$(OWNER)/$(IMAGE_NAME):$(GIT_COMMIT)
+	docker tag $(REGISTRY)/$(OWNER)/$(IMAGE_NAME) $(REGISTRY)/$(OWNER)/$(IMAGE_NAME):$(DATE_TAG)
+	docker tag $(REGISTRY)/$(OWNER)/$(IMAGE_NAME) $(REGISTRY)/$(OWNER)/$(IMAGE_NAME):latest
+
+# Push the Docker image to a repository with all tags
+push: tag
+	docker push $(REGISTRY)/$(OWNER)/$(IMAGE_NAME):$(GIT_COMMIT)
+	docker push $(REGISTRY)/$(OWNER)/$(IMAGE_NAME):$(DATE_TAG)
+	docker push $(REGISTRY)/$(OWNER)/$(IMAGE_NAME):latest
+
+# Clean up dangling Docker images
+clean:
+	docker image prune -f
+
+# Default target
+default: build

README.md

@@ -1,3 +1,10 @@
-# docker-almalinux-buildrunner
+# Docker Image Build: almalinux buildrunner
 
-Create almalinux docker images for buildagents
+[![Build Status](https://droneci.query.consul/api/badges/unkin/docker-almalinux-base/status.svg)](https://droneci.query.consul/unkin/docker-almalinux-base)
+
+This project provides a reproducible Docker image build process for `almalinux:8.10`, with custom YUM repository configurations and package installations. The build is automated using a `Makefile` and managed via CI tasks to ensure consistent and reliable Docker image builds.
+
+This build includes:
+- build-essentials
+- nodejs:20 for actions
+- make, git, rpmbuild, etc