Merge pull request #69 from amfoss/praveshan-develop

update workflow to azure

Author: ganidande905

.github/workflows/ghcr-deploy.yml

@@ -1,100 +1,84 @@
-# Inspired the workflow from https://faun.pub/full-ci-cd-with-docker-github-actions-digitalocean-droplets-container-registry-db2938db8246
-name: CI
+# Name of the workflow
+name: Create, Publish, and Deploy Docker Image
 
-# 1
-# Controls when the workflow will run
+# Configures this workflow to run every time a change is pushed to the branch called `praveshan`.
 on:
-  # Triggers the workflow on push events but only for the master branch
   push:
-    branches: [ praveshan ]
+    branches: ['praveshan']
 
-  # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
-    inputs:
-      version:
-        description: 'Image version'
-        required: true
-#2
+# Defines environment variables available to all jobs in the workflow.
 env:
-  REGISTRY: "registry.digitalocean.com/praveshan"
-  IMAGE_NAME: "ammentor-backend-praveshan"
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
 
-#3
+# Defines the jobs that will run as part of the workflow.
 jobs:
-  build_and_push:
+  # JOB 1: Builds the Docker image and pushes it to the GitHub Container Registry.
+  build-and-push-image:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+    
     steps:
-      - name: Checkout the repo 
-        uses: actions/checkout@v2
-      
-      - name: List files in repository
-        run: ls -laR
-      
-      - name: Build container image
-        # This now builds the image with both the commit tag and the 'latest' tag
-        run: docker build -t $(echo $REGISTRY)/$(echo $IMAGE_NAME):$(echo $GITHUB_SHA | head -c7) -t $(echo $REGISTRY)/$(echo $IMAGE_NAME):latest .
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
-      - name: Install doctl
-        uses: digitalocean/action-doctl@v2
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
         with:
-          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
-    
-      - name: Log in to DigitalOcean Container Registry with short-lived credentials
-        run: doctl registry login --expiry-seconds 1800
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
 
-      - name: Push image to DigitalOcean Container Registry
-        # This now pushes both the commit tag and the 'latest' tag
-        run: |
-          docker push $(echo $REGISTRY)/$(echo $IMAGE_NAME):$(echo $GITHUB_SHA | head -c7)
-          docker push $(echo $REGISTRY)/$(echo $IMAGE_NAME):latest
-          
-      # This removes the old images from the container registry
-      - name: Remove old images from Container Registry
-        uses: henrik242/docr-image-remove@v1
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
         with:
-          image_repository: ammentor-backend-praveshan
-          buffer_size: 10
-          exclude: ^(latest)$
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
 
+  # JOB 2: Deploys the new image to your Virtual Machine.
   deploy:
+    # This job will only run after the 'build-and-push-image' job is successful.
+    needs: build-and-push-image
     runs-on: ubuntu-latest
-    needs: build_and_push
-    steps:
-      - name: Checkout the repo 
-        uses: actions/checkout@v2
 
-      - name: Copy docker-compose.yml to Droplet
-        uses: appleboy/scp-action@master
-        with:
-          host: ${{ secrets.HOST }}
-          username: ${{ secrets.USERNAME }}
-          key: ${{ secrets.SSHKEY }}
-          passphrase: ${{ secrets.PASSPHRASE }}
-          source: "docker-compose.yml"
-          target: "myapp"
-
-      - name: Deploy to Digital Ocean droplet via SSH action
-        uses: appleboy/ssh-action@master
+    steps:
+      - name: SSH into VM and redeploy
+        uses: appleboy/[email protected]
         with:
-          host: ${{ secrets.HOST }}
-          username: ${{ secrets.USERNAME }}
-          key: ${{ secrets.SSHKEY }}
-          passphrase: ${{ secrets.PASSPHRASE }}
-          envs: IMAGE_NAME,REGISTRY,{{ secrets.DIGITALOCEAN_ACCESS_TOKEN }},GITHUB_SHA
+          host: ${{ secrets.VM_HOST }}
+          username: ${{ secrets.VM_USERNAME }}
+          key: ${{ secrets.SSH_KEY }}
           script: |
-            # Navigate to the app directory
-            cd myapp
+            # Pull the image tagged with the specific branch name (e.g., 'praveshan')
+            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }}
             
-            # Login to registry
-            docker login -u ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }} -p ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }} registry.digitalocean.com
-            
-            # Update the image definition in docker-compose.yml to use the new tag
-            # This makes sure we run the exact version we just built
-            sed -i 's|image: .*|image: $(echo $REGISTRY)/$(echo $IMAGE_NAME):$(echo $GITHUB_SHA | head -c7)|' docker-compose.yml
-
-            # Pull the new backend image
-            docker compose pull backend
+            # Stop and remove the old container to avoid conflicts
+            docker stop my-app-container || true
+            docker rm my-app-container || true
             
-            # Stop and recreate ONLY the backend service with the new image
-            docker compose up -d --no-deps backend
+            # Run the new container using the correct image tag
+            docker run -d \
+              --restart always \
+              -p 8080:80 \
+              --name my-app-container \
+              ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }}