name: Build and Push Docker Image

on:
  push:
    branches: [main]

permissions:
  packages: write
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest

    container:
      image: quay.io/buildah/stable
      options: --security-opt seccomp=unconfined --security-opt apparmor=unconfined --device /dev/fuse:rw --privileged

    env:
      BUILDAH_ISOLATION: chroot
      STORAGE_DRIVER: vfs

    steps:
      - name: Install Node.js
        run: dnf install -y nodejs git

      - uses: actions/checkout@v4

      - name: Login to Registry
        run: echo "${{ secrets.PACKAGES_TOKEN }}" | buildah login -u "${{ secrets.PACKAGES_USER }}" --password-stdin git.kocoder.xyz

      - name: Buildah Build
        run: |
          buildah build -t ${{ github.sha }} .
          buildah tag ${{ github.sha }} latest

      - name: Push Docker Images
        run: |
          buildah push ${{ github.sha }} docker://git.kocoder.xyz/workspaces/go-workspace:${{ github.sha }}
          buildah push ${{ github.sha }} docker://git.kocoder.xyz/workspaces/go-workspace:latest