From d8b5d3f2623867a596ad57e2fc85721d6b3271f2 Mon Sep 17 00:00:00 2001
From: Neko Ayaka <neko@ayaka.moe>
Date: Mon, 25 Aug 2025 04:30:37 +0800
Subject: [PATCH] feat(ci): proper Dockerfile for current project setup &
 release workflow

Close #424
---
 .dockerignore                         |  4 ++
 .github/workflows/release-docker.yaml | 59 +++++++++++++++++++++++++++
 apps/stage-web/Dockerfile             |  9 ++--
 3 files changed, 67 insertions(+), 5 deletions(-)
 create mode 100644 .dockerignore
 create mode 100644 .github/workflows/release-docker.yaml

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 000000000..7b4529602
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,4 @@
+**/node_modules
+**/dist
+**/.temp
+target
diff --git a/.github/workflows/release-docker.yaml b/.github/workflows/release-docker.yaml
new file mode 100644
index 000000000..d00497bc4
--- /dev/null
+++ b/.github/workflows/release-docker.yaml
@@ -0,0 +1,59 @@
+name: Release Docker / OCI
+
+on:
+  push:
+    tags:
+      - '**'
+  workflow_dispatch:
+
+jobs:
+  ghcr_build:
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Fetch version
+        id: version
+        run: |
+          export LAST_TAGGED_COMMIT=$(git rev-list --tags --max-count=1)
+          export LAST_TAG=$(git describe --tags $LAST_TAGGED_COMMIT)
+          echo "version=${LAST_TAG#v}" >> $GITHUB_OUTPUT
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          platforms: linux/amd64,linux/arm64,linux/arm64/v8
+
+      - name: Sign in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create image tags
+        id: image_tag
+        run: |
+          echo "tag_latest=ghcr.io/${{ github.repository }}:latest" >> $GITHUB_OUTPUT
+          echo "tag=ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}" >> $GITHUB_OUTPUT
+
+      - name: Build and Push
+        uses: docker/build-push-action@v6
+        with:
+          context: ./
+          file: ./apps/stage-web//Dockerfile
+          push: true
+          platforms: linux/amd64,linux/arm64,linux/arm64/v8
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: |
+            ${{ steps.image_tag.outputs.tag_latest }}
+            ${{ steps.image_tag.outputs.tag }}
diff --git a/apps/stage-web/Dockerfile b/apps/stage-web/Dockerfile
index 20ca29d51..491773ed3 100644
--- a/apps/stage-web/Dockerfile
+++ b/apps/stage-web/Dockerfile
@@ -4,15 +4,14 @@ WORKDIR /app
 
 RUN apt update && apt install -y ca-certificates curl
 RUN update-ca-certificates
-RUN apt update && apt install -y python curl
+RUN apt update && apt install -y python3 curl
 
 RUN corepack enable
 
-COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
-RUN --mount=type=cache,id=pnpm-store,target=/root/.turbo \
+COPY . .
+RUN --mount=type=cache,id=pnpm-store,target=/root/.pnpm-store \
     pnpm install --frozen-lockfile
 
-COPY . .
 RUN pnpm -F @proj-airi/stage-web run build && \
     pnpm -F @proj-airi/docs run build:base && \
     mv ./docs/.vitepress/dist ./apps/stage-web/dist/docs && \
@@ -21,7 +20,7 @@ RUN pnpm -F @proj-airi/stage-web run build && \
 
 FROM nginx:stable-alpine AS production-stage
 
-COPY --from=build-stage /apps/stage-web/dist /usr/share/nginx/html
+COPY --from=build-stage /app/apps/stage-web/dist /usr/share/nginx/html
 EXPOSE 80
 
 CMD ["nginx", "-g", "daemon off;"]