---
kind: pipeline
name: test

platform:
  os: linux
  arch: amd64

steps:
- name: markdownlint
  image: thegeeklab/markdownlint-cli
  commands:
  - markdownlint 'README.md'

trigger:
  ref:
  - refs/heads/main
  - refs/pull/**
  - refs/tags/**

---
kind: pipeline
name: build-container

platform:
  os: linux
  arch: amd64

steps:
- name: wait-for
  image: thegeeklab/wait-for
  commands:
  - wait-for dind:2376
  environment:
    WAITFOR_TIMEOUT: 60

- name: dryrun
  image: jdrouet/docker-with-buildx:stable
  commands:
  - docker buildx create --use
  - docker buildx build --platform linux/arm/v7,linux/arm64/v8,linux/amd64 --tag thegeeklab/buildx-alpine:latest .
  volumes:
  - name: dockersock
    path: /var/run
  when:
    ref:
    - refs/pull/**
  depends_on:
  - wait-for

- name: tags
  image: thegeeklab/docker-autotag
  environment:
    DOCKER_AUTOTAG_FORCE_LATEST: True
    DOCKER_AUTOTAG_IGNORE_PRERELEASE: True
    DOCKER_AUTOTAG_OUTPUT_FILE: .tags
    DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
  when:
    ref:
    - refs/heads/main
    - refs/tags/**
  depends_on:
  - wait-for

- name: publish-dockerhub
  image: jdrouet/docker-with-buildx:stable
  commands:
  - docker login -u "$$DOCKER_USERNAME" -p "$$DOCKER_PASSWORD"
  - docker buildx create --use
  - docker buildx build --push --platform linux/amd64 --tag thegeeklab/buildx-alpine:latest .
  - docker buildx build --push --platform linux/arm/v7 --tag thegeeklab/buildx-alpine:latest .
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
    DOCKER_USERNAME:
      from_secret: docker_username
  volumes:
  - name: dockersock
    path: /var/run
  when:
    ref:
    - refs/heads/main
    - refs/tags/**
  depends_on:
  - tags

- name: publish-gitea
  image: plugins/gitea-release
  settings:
    api_key:
      from_secret: gitea_token
    base_url: https://gitea.rknet.org
    note: CHANGELOG.md
    overwrite: true
    title: ${DRONE_TAG}
  when:
    ref:
    - refs/tags/**
  depends_on:
  - publish-dockerhub

services:
- name: dind
  image: docker:dind
  privileged: true
  volumes:
  - name: dockersock
    path: /var/run

volumes:
- name: dockersock
  temp: {}

trigger:
  ref:
  - refs/heads/main
  - refs/pull/**
  - refs/tags/**

depends_on:
- test

---
kind: pipeline
name: notifications

platform:
  os: linux
  arch: amd64

steps:
- name: pushrm-dockerhub
  pull: always
  image: chko/docker-pushrm:1
  environment:
    DOCKER_PASS:
      from_secret: docker_password
    DOCKER_USER:
      from_secret: docker_username
    PUSHRM_FILE: README.md
    PUSHRM_SHORT: Rootless Alpine base image
    PUSHRM_TARGET: thegeeklab/${DRONE_REPO_NAME}
  when:
    status:
    - success

- name: pushrm-quay
  pull: always
  image: chko/docker-pushrm:1
  environment:
    APIKEY__QUAY_IO:
      from_secret: quay_token
    PUSHRM_FILE: README.md
    PUSHRM_TARGET: quay.io/thegeeklab/${DRONE_REPO_NAME}
  when:
    status:
    - success

- name: matrix
  image: plugins/matrix
  settings:
    homeserver:
      from_secret: matrix_homeserver
    password:
      from_secret: matrix_password
    roomid:
      from_secret: matrix_roomid
    template: "Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}"
    username:
      from_secret: matrix_username
  when:
    status:
    - success
    - failure

trigger:
  ref:
  - refs/heads/main
  - refs/tags/**
  status:
  - success
  - failure

depends_on:
- build-container

---
kind: signature
hmac: d62e2d1f1c7d48265f021c7581a4171ccbe70fdfca9569fa9733c915bc2fcde4

...