4 Commits

Include renames

Author	SHA1	Message	Date
darroyo	378b46cbd8	fix(docker): don't ignore build-output/, the COPY needs it in the build context ... Earlier cleanup added build-output to .dockerignore, but the runtime stage does COPY build-output/*-runner /work/application, so the directory must be present in the build context.	2026-08-13 20:47:53 -04:00
darroyo	6421a91148	ci: revert to Docker image build + registry push (no deploy) ... Drop the LXC deploy step. Pipeline now stops at publishing the image to the Gitea registry; deployment is handled out of band. Restored: - Dockerfile (multi-stage: curl-builder + quarkus-micro-image:2.0, generic via build-output/*-runner wildcard, COPY --chown=1001:1001) - compose.yaml (one-shot install of the published image) - .dockerignore (excludes build-output/) CI workflow: - Installs docker-buildx (needed for COPY --chown) - Uses docker buildx build - chmod 775 and echo securerandom happen in the 'Stage binary for Docker' step; the final image has no RUN commands - Tags :latest and :<short-sha>, pushes with retry No deploy step. Pull the image with docker compose / run it manually.	2026-08-13 20:25:43 -04:00
darroyo	a2fb5cc521	ci: deploy native binary directly to LXC via SSH (drop Docker/registry) ... Switch the runtime from a Docker image to a systemd service running the native binary on the LXC host. The CI still uses Docker for the build environment (maven:3.9.6-eclipse-temurin-21), but stops at producing the static native binary. Pipeline changes: - Drop docker.io, docker-buildx, docker buildx, docker push, registry. - Drop Dockerfile, compose.yaml, .dockerignore (no longer needed). - Build native binary in CI container, SCP to LXC, run deploy script. - Deploy script stops the service, swaps the binary, starts it, hits /q/health/live to verify. LXC one-time setup (manual, run on the host): - useradd runner (UID 1001) - mkdir /opt/shot-crafter-calculator/{data,keys,deploy} - copy RSA JWT keys into keys/ - install /etc/systemd/system/shot-crafter-calculator.service - install /usr/local/bin/deploy-shot-crafter-calculator.sh - useradd deployer + ssh keypair for the CI - store DEPLOY_SSH_KEY secret in Gitea Bootstrap the first deploy manually with scp + ssh before relying on CI.	2026-08-13 20:05:17 -04:00
darroyo	9db3f7a914	ci: build native Docker image and push to Gitea Container Registry ... Adds: - Dockerfile based on quarkus-micro-image:2.0 (~50MB base) Runs the native binary as non-root user 1001, exposes 8080 - .dockerignore to exclude build artifacts - Gitea Actions workflow with 3 parallel jobs: - build-jvm: standard JAR (mvn package) - build-native: GraalVM native binary (mvn package -Pnative) - docker-native: takes the native binary artifact, builds the container image and pushes to gitea.danielarroyo.cl/proyectos/shot-crafter-calculator with tags 'latest' and short SHA Triggers: push to main and PRs (docker job only on push). Required secrets: GITEA_USERNAME, GITEA_TOKEN (write:packages).	2026-08-12 16:16:51 -04:00