From fe00d99d514f63b5a1f3ec6f7ee59a60a29ac433 Mon Sep 17 00:00:00 2001
From: Barrett Harber <barrett.harber@rearc.io>
Date: Fri, 18 Oct 2024 13:45:43 -0400
Subject: [PATCH] Add Dockerfile and gh workflow to build and publish image

---
 .dockerignore               |  5 +++
 .github/workflows/build.yml | 61 +++++++++++++++++++++++++++++++++++++
 Dockerfile                  | 14 +++++++++
 compose.yml                 |  6 ++++
 4 files changed, 86 insertions(+)
 create mode 100644 .dockerignore
 create mode 100644 .github/workflows/build.yml
 create mode 100644 Dockerfile
 create mode 100644 compose.yml

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..804bc24
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,5 @@
+.dockerignore
+compose.yml
+Dockerfile
+*.md
+.git/
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..2760c5d
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,61 @@
+---
+name: Build and Publish
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+      - master
+
+permissions:
+  id-token: write
+  packages: write
+  statuses: write
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-publish:
+    name: Build and Publish
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Git clone the repository
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Add GHCR env var
+        env:
+          REPO: ${{ github.repository }}
+          REF_NAME: ${{ github.ref_name }}
+        run: |
+          echo "GHCR_REPO=ghcr.io/${REPO,,}" >>"${GITHUB_ENV}"
+          echo "GHCR_TAG=${REF_NAME/\//_}" >>"${GITHUB_ENV}"
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: |
+            ${{ env.GHCR_REPO }}:latest
+            ${{ env.GHCR_REPO }}:${{ env.GHCR_TAG }}
+          cache-from: type=gha,scope=${{ github.repository_id }}
+          cache-to: type=gha,mode=max,scope=${{ github.repository_id }}
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..595c780
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,14 @@
+FROM python:3.13-alpine
+
+WORKDIR /opt/app
+
+COPY MANIFEST.in README.rst requirements.txt setup.py ./
+COPY iamctl/ iamctl/
+COPY bin/ bin/
+
+RUN apk add --no-cache git && \
+    git init && \
+    pip install --no-cache-dir . && \
+    rm -rf /root/.cache
+
+ENTRYPOINT [ "iamctl" ]
diff --git a/compose.yml b/compose.yml
new file mode 100644
index 0000000..bff9ebc
--- /dev/null
+++ b/compose.yml
@@ -0,0 +1,6 @@
+services:
+  main:
+    build:
+      context: .
+    volumes:
+      - ~/.aws/:/root/.aws/:rw
\ No newline at end of file