---
kind: pipeline
type: docker
name: docker-build-and-push

trigger:
  branch:
    - drone-v4

image_pull_secrets:
  - DOCKER_AUTH

services:
  - name: docker
    # https://hub.docker.com/r/library/docker
    image: hub.docker.struchkov.dev/docker:27.1.2-dind-alpine3.20
    privileged: true
    volumes:
      - name: dockersock
        path: /var/run

volumes:
  - name: dockersock
    temp: {}

steps:
  - name: docker build an publish
    # https://hub.docker.com/r/library/docker
    image: docker.struchkov.dev/docker-buildx:latest
    environment:
      DOCKER_REGISTRY_TOKEN:
        from_secret: DOCKER_REGISTRY_TOKEN
      DOCKER_REGISTRY_USER:
        from_secret: DOCKER_REGISTRY_USER
    volumes:
      - name: dockersock
        path: /var/run
    commands:
      - sleep 15
      - echo "$DOCKER_REGISTRY_TOKEN" | docker login docker.struchkov.dev --username $DOCKER_REGISTRY_USER --password-stdin
      - echo "$DOCKER_REGISTRY_TOKEN" | docker login hub.docker.struchkov.dev --username $DOCKER_REGISTRY_USER --password-stdin
      - docker buildx create --use
      - docker buildx build --push --platform linux/arm/v7,linux/arm64/v8,linux/amd64 -t "docker.struchkov.dev/quartz:develop" .
---
kind: pipeline
type: docker
name: docker-build-and-push-release

trigger:
  ref:
    - refs/tags/v*

image_pull_secrets:
  - DOCKER_AUTH

volumes:
  - name: dockersock
    temp: {}

services:
  - name: docker
    # https://hub.docker.com/r/library/docker
    image: hub.docker.struchkov.dev/docker:27.1.2-dind-alpine3.20
    privileged: true
    volumes:
      - name: dockersock
        path: /var/run

steps:
  - name: docker build an publish
    image: docker.struchkov.dev/docker-buildx:latest
    environment:
      DOCKER_REGISTRY_TOKEN:
        from_secret: DOCKER_REGISTRY_TOKEN
      DOCKER_REGISTRY_USER:
        from_secret: DOCKER_REGISTRY_USER
    volumes:
      - name: dockersock
        path: /var/run
    commands:
      - sleep 15
      - echo "$DOCKER_REGISTRY_TOKEN" | docker login docker.struchkov.dev --username $DOCKER_REGISTRY_USER --password-stdin
      - echo "$DOCKER_REGISTRY_TOKEN" | docker login hub.docker.struchkov.dev --username $DOCKER_REGISTRY_USER --password-stdin
      - docker buildx create --use
      - docker buildx build --push --platform linux/arm/v7,linux/arm64/v8,linux/amd64 -t "docker.struchkov.dev/quartz:latest" -t "docker.struchkov.dev/quartz:$DRONE_TAG" .


# drone sign --save DockerFiles/quartz
---
kind: signature
hmac: 158b5871208c3dc526169f85e8acbc5098b47f3be5d30ad21a1f93a8f3306c8d

...