Add Docker build/deploy scripts, .dockerignore, and registry skill

2026-06-22 20:16:53 -04:00
parent 314df55221
commit d916b63b62
4 changed files with 332 additions and 0 deletions
@@ -0,0 +1,180 @@
+#!/usr/bin/env bash
+# Script: deploy-img.sh
+# Description: Pousse l'image Docker Imago vers le registre HTTP local,
+#              gère le versioning semver et la rétention.
+# Adapté de: homelab-automation-api/docker/deploy-img.sh
+
+set -euo pipefail
+
+#####################################
+#            CONFIG                 #
+#####################################
+IMAGE_NAME="imago-backend"
+REGISTRY_HOST="dev.lab.home"
+REGISTRY_PORT="5000"
+MAX_VERSIONS=5
+LOCAL_TAG="latest"
+PUSH_LATEST="yes"
+
+#####################################
+#         DÉDUCTIONS                #
+#####################################
+REGISTRY="${REGISTRY_HOST}:${REGISTRY_PORT}"
+REMOTE_REPO="${REGISTRY}/${IMAGE_NAME}"
+LOCAL_IMAGE="${IMAGE_NAME}:${LOCAL_TAG}"
+TEMP_DIR="/tmp/imago-deploy-$(date +%s)"
+CURL="curl -fsSL"
+JQ_BIN="${JQ_BIN:-jq}"
+ACCEPT_MANIFEST='application/vnd.docker.distribution.manifest.v2+json'
+
+#####################################
+#              UTILITAIRES          #
+#####################################
+info()    { echo -e "\033[1;34m[INFO]\033[0m $*"; }
+warn()    { echo -e "\033[1;33m[AVERT]\033[0m $*"; }
+error()   { echo -e "\033[1;31m[ERREUR]\033[0m $*" >&2; }
+success() { echo -e "\033[1;32m[SUCCÈS]\033[0m $*"; }
+
+cleanup() {
+  set +e
+  [[ -d "$TEMP_DIR" ]] && rm -rf "$TEMP_DIR"
+}
+trap cleanup EXIT
+
+require_cmd() {
+  command -v "$1" >/dev/null 2>&1 || { error "Commande requise manquante: $1"; exit 1; }
+}
+
+#####################################
+#         PRÉ-VÉRIFICATIONS         #
+#####################################
+require_cmd docker
+require_cmd curl
+require_cmd sed
+require_cmd grep
+require_cmd awk
+require_cmd sort
+
+info "Vérification de l'image locale '${LOCAL_IMAGE}'…"
+if ! docker image inspect "${LOCAL_IMAGE}" >/dev/null 2>&1; then
+  error "L'image locale ${LOCAL_IMAGE} n'existe pas. Lance build-img.ps1 d'abord."
+  exit 1
+fi
+
+info "Vérification du registre (http://${REGISTRY}/v2/)…"
+if ! ${CURL} "http://${REGISTRY}/v2/" >/dev/null 2>&1; then
+  error "Registre injoignable à http://${REGISTRY}/v2/"
+  exit 1
+fi
+
+mkdir -p "${TEMP_DIR}"
+
+#####################################
+#       RÉCUPÉRATION DES TAGS       #
+#####################################
+get_all_tags() {
+  local tags_json
+  if ! tags_json="$(${CURL} "http://${REGISTRY}/v2/${IMAGE_NAME}/tags/list" 2>/dev/null)"; then
+    return 0
+  fi
+  if command -v "${JQ_BIN}" >/dev/null 2>&1; then
+    echo "${tags_json}" | ${JQ_BIN} -r '.tags[]?' 2>/dev/null || true
+  else
+    echo "${tags_json}" \
+      | tr -d '\n' \
+      | sed -n 's/.*"tags":[[]\([^]]*\)[]].*/\1/p' \
+      | tr -d '"' \
+      | tr ',' '\n' \
+      | sed 's/^[[:space:]]*//; s/[[:space:]]*$//'
+  fi
+}
+
+filter_semver() {
+  grep -E '^[0-9]+\.[0-9]+\.[0-9]+$' || true
+}
+
+increment_patch() {
+  local tag="$1"
+  local major minor patch
+  IFS='.' read -r major minor patch <<< "${tag}"
+  echo "${major}.${minor}.$((patch+1))"
+}
+
+info "Récupération des tags existants…"
+ALL_TAGS="$(get_all_tags || true)"
+SEMVER_TAGS="$(printf '%s\n' "${ALL_TAGS}" | filter_semver | sort -V || true)"
+
+if [[ -z "${SEMVER_TAGS}" ]]; then
+  NEW_TAG="2.0.0"
+else
+  LATEST_TAG="$(printf '%s\n' "${SEMVER_TAGS}" | tail -n1)"
+  NEW_TAG="$(increment_patch "${LATEST_TAG}")"
+fi
+info "Tag retenu : ${NEW_TAG}"
+
+#####################################
+#       TAG + PUSH                  #
+#####################################
+info "Taggage ${LOCAL_IMAGE} → ${REMOTE_REPO}:${NEW_TAG}"
+docker tag "${LOCAL_IMAGE}" "${REMOTE_REPO}:${NEW_TAG}"
+
+if [[ "${PUSH_LATEST}" == "yes" ]]; then
+  info "Taggage ${LOCAL_IMAGE} → ${REMOTE_REPO}:latest"
+  docker tag "${LOCAL_IMAGE}" "${REMOTE_REPO}:latest"
+fi
+
+info "Push ${REMOTE_REPO}:${NEW_TAG}…"
+docker push --disable-content-trust "${REMOTE_REPO}:${NEW_TAG}"
+
+if [[ "${PUSH_LATEST}" == "yes" ]]; then
+  info "Push ${REMOTE_REPO}:latest…"
+  docker push --disable-content-trust "${REMOTE_REPO}:latest"
+fi
+
+#####################################
+#     RÉTENTION                     #
+#####################################
+delete_by_tag() {
+  local tag="$1"
+  local digest
+  digest="$(curl -fsSI -H "Accept: ${ACCEPT_MANIFEST}" "http://${REGISTRY}/v2/${IMAGE_NAME}/manifests/${tag}" \
+            | tr -d '\r' \
+            | awk -F': ' 'tolower($1)=="docker-content-digest"{print $2}' \
+            | tail -n1)"
+  if [[ -z "${digest}" ]]; then
+    warn "Digest introuvable pour ${tag}. Skip."
+    return 0
+  fi
+  info "Suppression ${tag} (digest: ${digest})…"
+  curl -fsS -X DELETE "http://${REGISTRY}/v2/${IMAGE_NAME}/manifests/${digest}" >/dev/null || true
+}
+
+ALL_TAGS="$(get_all_tags || true)"
+SEMVER_TAGS="$(printf '%s\n' "${ALL_TAGS}" | filter_semver | sort -V || true)"
+
+if [[ -n "${SEMVER_TAGS}" ]]; then
+  COUNT="$(printf '%s\n' "${SEMVER_TAGS}" | wc -l | awk '{print $1}')"
+  if (( COUNT > MAX_VERSIONS )); then
+    TO_DELETE_COUNT=$(( COUNT - MAX_VERSIONS ))
+    OLDEST="$(printf '%s\n' "${SEMVER_TAGS}" | head -n "${TO_DELETE_COUNT}")"
+    while IFS= read -r old_tag; do
+      [[ -z "${old_tag}" ]] && continue
+      [[ "${old_tag}" == "${NEW_TAG}" ]] && continue
+      delete_by_tag "${old_tag}"
+    done <<< "${OLDEST}"
+  fi
+fi
+
+#####################################
+#        NETTOYAGE LOCAL            #
+#####################################
+info "Nettoyage tags locaux temporaires…"
+set +e
+docker rmi "${REMOTE_REPO}:${NEW_TAG}" >/dev/null 2>&1
+[[ "${PUSH_LATEST}" == "yes" ]] && docker rmi "${REMOTE_REPO}:latest" >/dev/null 2>&1
+set -e
+
+success "Déploiement terminé. Version publiée : ${NEW_TAG}"
+success "Image disponible : ${REMOTE_REPO}:${NEW_TAG}"
+success "                 : ${REMOTE_REPO}:latest"
+exit 0