Merge pull request #128 from signalwire/gha

[GHA] Migrate to new project layout.

.github/docker/debian/bookworm/amd64/Dockerfile

@@ -1,25 +1,35 @@
-ARG BUILDER_IMAGE=debian:bookworm
-ARG MAINTAINER="Andrey Volk <[email protected]>"
+ARG BUILDER_IMAGE=debian:bookworm-20240513
 
 FROM ${BUILDER_IMAGE} AS builder
 
+ARG MAINTAINER_NAME="Andrey Volk"
+ARG MAINTAINER_EMAIL="[email protected]"
+
+ARG CODENAME=bookworm
+ARG ARCH=amd64
+
 # Credentials
 ARG REPO_DOMAIN=freeswitch.signalwire.com
 ARG REPO_USERNAME=user
-ARG REPO_PASSWORD=password
 
 ARG BUILD_NUMBER=42
 ARG GIT_SHA=0000000000
 
 ARG GPG_KEY="/usr/share/keyrings/signalwire-freeswitch-repo.gpg"
 
-MAINTAINER ${MAINTAINER}
+ARG DATA_DIR=/data
+
+LABEL maintainer="${MAINTAINER_NAME} <${MAINTAINER_EMAIL}>"
 
 SHELL ["/bin/bash", "-c"]
 
-RUN apt-get -q update && \
-    DEBIAN_FRONTEND=noninteractive apt-get -yq install \
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get -q update \
+    && apt-get -y -q install \
         apt-transport-https \
+        autoconf \
+        automake \
         build-essential \
         ca-certificates \
         cmake \
@@ -29,50 +39,59 @@ RUN apt-get -q update && \
         dh-autoreconf \
         dos2unix \
         doxygen \
+        dpkg-dev \
         git \
+        gnupg2 \
         graphviz \
         libglib2.0-dev \
         libssl-dev \
         lsb-release \
         pkg-config \
+        unzip \
         wget
 
 RUN update-ca-certificates --fresh
 
-ENV DATA_DIR=/data
-WORKDIR ${DATA_DIR}
-
-COPY . ${DATA_DIR}
-RUN git reset --hard HEAD && git clean -xfd
-
-RUN echo "export CODENAME=$(lsb_release -sc | tr -d '\n')" | tee ~/.env && \
-    chmod +x ~/.env
+RUN echo "export CODENAME=${CODENAME}" | tee ~/.env \
+    && echo "export ARCH=${ARCH}" | tee -a ~/.env \
+    && chmod +x ~/.env
 
 RUN . ~/.env && cat <<EOF > /etc/apt/sources.list.d/freeswitch.list
 deb [signed-by=${GPG_KEY}] https://${REPO_DOMAIN}/repo/deb/debian-release ${CODENAME} main
 deb-src [signed-by=${GPG_KEY}] https://${REPO_DOMAIN}/repo/deb/debian-release ${CODENAME} main
 EOF
 
-RUN --mount=type=secret,id=REPO_PASSWORD \
-  printf "machine ${REPO_DOMAIN} " > ~/.netrc && \
-  printf "login ${REPO_USERNAME} " >> ~/.netrc && \
-  printf "password " >> ~/.netrc && \
-  cat /run/secrets/REPO_PASSWORD >> ~/.netrc && \
-  cp -f ~/.netrc /etc/apt/auth.conf
-
-RUN git config --global --add safe.directory '*'
-
-RUN curl --netrc -o ${GPG_KEY} https://${REPO_DOMAIN}/repo/deb/debian-release/signalwire-freeswitch-repo.gpg
+RUN git config --global --add safe.directory '*' \
+    && git config --global user.name "${MAINTAINER_NAME}" \
+    && git config --global user.email "${MAINTAINER_EMAIL}"
+
+RUN --mount=type=secret,id=REPO_PASSWORD,required=true \
+    printf "machine ${REPO_DOMAIN} "  > /etc/apt/auth.conf && \
+    printf "login ${REPO_USERNAME} " >> /etc/apt/auth.conf && \
+    printf "password "               >> /etc/apt/auth.conf && \
+    cat /run/secrets/REPO_PASSWORD   >> /etc/apt/auth.conf && \
+    sha512sum /run/secrets/REPO_PASSWORD && \
+    curl \
+        --fail \
+        --netrc-file /etc/apt/auth.conf \
+        --output ${GPG_KEY} \
+        https://${REPO_DOMAIN}/repo/deb/debian-release/signalwire-freeswitch-repo.gpg && \
+    file ${GPG_KEY} && \
+    apt-get --quiet update && \
+    apt-get --yes --quiet install \
+        libks2 \
+    && rm -f /etc/apt/auth.conf
 
 # Bootstrap and Build
-RUN apt-get -q update && \
-    DEBIAN_FRONTEND=noninteractive apt-get -yq install \
-        libks2
+COPY . ${DATA_DIR}
+WORKDIR ${DATA_DIR}
 
 RUN PACKAGE_RELEASE="${BUILD_NUMBER}.${GIT_SHA}" cmake . \
-    -DCMAKE_BUILD_TYPE=Debug \
-    -DCMAKE_INSTALL_PREFIX="/usr" && \
-    make package && mkdir OUT && mv -v *.deb OUT/.
+        -DCMAKE_BUILD_TYPE=Debug \
+        -DCMAKE_INSTALL_PREFIX="/usr" \
+    && make package \
+    && mkdir OUT \
+    && mv -v *.deb OUT/.
 
 # Artifacts image (mandatory part, the resulting image must have a single filesystem layer)
 FROM scratch