---
kind: pipeline
type: docker
name: build-amd64

platform:
  os: linux
  arch: amd64

steps:
  - name: build
    image: rancher/dapper:v0.5.8
    commands:
      - dapper -f Dockerfile --target dapper make build-rfo
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*
  - name: test
    image: rancher/dapper:v0.5.8
    environment:
      ACCESS_KEY_ID:
        from_secret: oss_access_key
      ACCESS_KEY_SECRET:
        from_secret: oss_access_secret
    commands:
      - dapper -f Dockerfile --target dapper make test
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*-rc*
  - name: package
    image: rancher/dapper:v0.5.8
    commands:
      - dapper -f Dockerfile --target dapper make package-rfo
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*
  - name: checksum
    image: orstar/checksum:v0.0.2
    settings:
      checksum_file: dist/artifacts/CHECKSUMsum-${DRONE_STAGE_ARCH}.txt
      checksum_flatten: true
      files:
        - dist/artifacts/*
      checksum:
        - sha256

  - name: publish-dist-artifacts
    image: orstar/ossutil:v1.7.16-confd
    environment:
      ENDPOINT: oss-cn-shenzhen.aliyuncs.com
      ACCESS_KEY_ID:
        from_secret: oss_access_key
      ACCESS_KEY_SECRET:
        from_secret: oss_access_secret
    commands:
      - /entrypoint.sh ossutil cp -r dist/artifacts/ oss://rfolabs/rfo/releases/$DRONE_TAG/
    when:
      event:
        - tag
      ref:
        - refs/tags/*

  - name: publish-image-runtime
    image: hub.oepkgs.net/rfolabs/hardened-build-base:v1.20.10
    commands:
      - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD $REGISTRY
      - DRONE_TAG=${DRONE_TAG} make publish-image-runtime
    environment:
      REGISTRY:
        from_secret: registry
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*

volumes:
  - name: docker
    host:
      path: /var/run/docker.sock

trigger:
  event:
    include:
      - tag

node:
  instance: agent-amd64
---
kind: pipeline
type: docker
name: build-arm64

platform:
  os: linux
  arch: arm64

steps:
  - name: build
    image: rancher/dapper:v0.5.8
    commands:
      - dapper -f Dockerfile --target dapper make build-rfo
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*

  - name: package
    image: rancher/dapper:v0.5.8
    commands:
      - dapper -f Dockerfile --target dapper make package-rfo
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*
  - name: checksum
    image: orstar/checksum:v0.0.2
    settings:
      checksum_file: dist/artifacts/CHECKSUMsum-${DRONE_STAGE_ARCH}.txt
      checksum_flatten: true
      files:
        - dist/artifacts/*
      checksum:
        - sha256

  - name: publish-dist-artifacts
    image: orstar/ossutil:v1.7.16-confd
    environment:
      ENDPOINT: oss-cn-shenzhen.aliyuncs.com
      ACCESS_KEY_ID:
        from_secret: oss_access_key
      ACCESS_KEY_SECRET:
        from_secret: oss_access_secret
    commands:
      - /entrypoint.sh ossutil cp -r dist/artifacts/ oss://rfolabs/rfo/releases/$DRONE_TAG/
    when:
      event:
        - tag
      ref:
        - refs/tags/*


  - name: publish-image-runtime
    image: hub.oepkgs.net/rfolabs/hardened-build-base:v1.20.10
    commands:
      - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD $REGISTRY
      - DRONE_TAG=${DRONE_TAG} make publish-image-runtime
    environment:
      REGISTRY:
        from_secret: registry
      DOCKER_PASSWORD:
        from_secret: docker_password
      DOCKER_USERNAME:
        from_secret: docker_username
    volumes:
      - name: docker
        path: /var/run/docker.sock
    when:
      event:
        - tag
      ref:
        - refs/tags/*

volumes:
  - name: docker
    host:
      path: /var/run/docker.sock

trigger:
  event:
    include:
      - tag

node:
  instance: agent-arm64
---
kind: pipeline
type: docker
name: manifest
platform:
  os: linux
  arch: amd64
steps:
  - name: push-runtime-manifest
    image: plugins/manifest
    settings:
      username:
        from_secret: docker_username
      password:
        from_secret: docker_password
      spec: manifest-runtime.tmpl
      ignore_missing: true
    when:
      event:
        - tag
      ref:
        - refs/tags/*
  - name: create-gitee-release
    image: orstar/drone-gitee-release:v0.0.2
    settings:
      prerelease: true
      access_token:
        from_secret: gitee_access_token
      title: release for ${DRONE_TAG}
      note: you can download binaries from https://rfolabs.oss-cn-shenzhen.aliyuncs.com/rfo/releases/${DRONE_TAG/+/%2B}/rfo.linux-amd64
    when:
      event:
        - tag
      ref:
        - refs/tags/*

node:
  instance: agent-amd64

trigger:
  event:
    include:
      - tag

depends_on:
  - build-amd64
  - build-arm64