default:
  image: quay.io/podman/stable

variables:
  DOCKER_TLS_CERTDIR: "/certs"
  IMAGE_TAG: "${CI_COMMIT_REF_SLUG}"
stages:
  - test
  - build-and-push-image
  - push-retagged-branch
  - push-retagged-latest

test:
  stage: test
  image: rust:alpine3.22
  script: 
    - apk add openssl-dev musl-dev openssl-libs-static lld git
    - git submodule update --init
    - cargo test

build-and-push-image:
  stage: build-and-push-image
  script:
    - git submodule update --init
    - podman login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
    - podman build -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA" .
    - podman push "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA"

push-retagged-branch:
  stage: push-retagged-branch
  script:
    - podman login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
    - podman pull "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA"
    - podman tag "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA" "$CI_REGISTRY_IMAGE:$IMAGE_TAG"
    - podman push "$CI_REGISTRY_IMAGE:$IMAGE_TAG"
  rules:
    - if: $CI_PIPELINE_SOURCE == "push"
      when: on_success

push-retagged-latest:
  stage: push-retagged-latest
  script:
    - podman login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
    - podman pull "$CI_REGISTRY_IMAGE:$IMAGE_TAG"
    - podman tag "$CI_REGISTRY_IMAGE:$IMAGE_TAG" "$CI_REGISTRY_IMAGE:latest"
    - podman push "$CI_REGISTRY_IMAGE:latest"
  rules:
    - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
      when: on_success