CI\CD for docker added + build to local

Author: Igor Ushakov

.github/workflows/docker.yaml

@@ -0,0 +1,42 @@
+name: Docker Image Build and Publish
+
+on:
+  push:
+    tags:
+      - "*.*.*"
+  workflow_dispatch:
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    environment: cli_docker
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Build
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: docker/Dockerfile
+          push: false
+          tags: passwork-cli:test
+          outputs: type=docker
+
+      - name: Tests
+        run: |
+          docker run --rm passwork-cli:test --help
+
+      - name: Login
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Push
+        run: |
+          docker tag passwork-cli:test ${{ secrets.DOCKER_USERNAME }}/passwork-cli:latest
+          docker tag passwork-cli:test ${{ secrets.DOCKER_USERNAME }}/passwork-cli:${{ github.ref_name }}
+          docker push ${{ secrets.DOCKER_USERNAME }}/passwork-cli:latest
+          docker push ${{ secrets.DOCKER_USERNAME }}/passwork-cli:${{ github.ref_name }}

README.md

@@ -4,7 +4,7 @@ A Python client for interacting with the Passwork password management API. It pr
 
 ## Installation
 
-You can install the package directly from Bitbucket:
+You can install the package directly from Github:
 
 ```bash
 pip install git+ssh://[email protected]:passwork-me/passwork-python.git
@@ -56,9 +56,12 @@ For detailed CLI documentation and examples, see the [CLI README](cli/README.md)
 For CI/CD pipelines and containerized environments, a Docker image is provided:
 
 ```bash
-# Build the Docker image
-cd docker
-docker build -t passwork-cli .
+# Pull the Docker image
+docker pull passwork/passwork-cli:latest
+docker tag passwork/passwork-cli:latest passwork-cli
+
+# Or build it yourself
+docker build -f docker/Dockerfile -t passwork-cli .
 
 # Run a command using the container
 docker run -it --rm \
@@ -258,4 +261,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE. 
+SOFTWARE.

docker/Dockerfile

@@ -1,24 +1,17 @@
-FROM python:3.11-slim
+FROM python:3.11-slim AS builder
+WORKDIR /app
+COPY . .
+RUN pip install --prefix=/install --no-cache-dir .
 
+FROM python:3.11-slim
 LABEL maintainer="Passwork Team"
 LABEL description="Passwork CLI Docker Image for CI/CD pipelines"
 
-# Install git and other dependencies
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends git && \
-    apt-get clean && \
-    rm -rf /var/lib/apt/lists/*
+COPY --from=builder /install /usr/local
 
-# Set working directory
-WORKDIR /app
-
-# Install passwork-cli
-RUN pip install --no-cache-dir git+https://github.com/passwork-me/passwork-python.git
+RUN groupadd -r passwork --gid=1001 && \
+  useradd -r -g passwork --uid=1001 passwork
 
-# Create a non-root user to run the CLI
-RUN groupadd -r passwork && useradd -r -g passwork passwork
 USER passwork
-
-# Set the entrypoint to passwork-cli
 ENTRYPOINT ["passwork-cli"]
 CMD ["--help"]

docker/README.md

@@ -1,12 +1,13 @@
+[![Docker Pulls](https://img.shields.io/docker/pulls/passwork/passwork-cli)](https://hub.docker.com/r/passwork/passwork-cli) [![Image Size](https://img.shields.io/docker/image-size/passwork/passwork-cli/latest)](https://hub.docker.com/r/passwork/passwork-cli) ![Docker Build](https://github.com/passwork-me/passwork-python/actions/workflows/docker.yaml/badge.svg)
+
 # Passwork CLI Docker Container
 
 This directory contains Docker configuration for running Passwork CLI in a containerized environment, which is particularly useful for CI/CD pipelines in Bitbucket or other CI systems.
 
 ## Building the Docker Image
 
 ```bash
-cd docker
-docker build -t passwork-cli .
+docker build -f ../docker/Dockerfile -t passwork-cli ..
 ```
 
 ## Using the Docker Container
@@ -97,6 +98,7 @@ pipelines:
 ```
 
 Don't forget to set up repository variables in Bitbucket:
+
 - `PASSWORK_HOST`
 - `PASSWORK_TOKEN`
 - `PASSWORK_MASTER_KEY`
@@ -105,4 +107,4 @@ Don't forget to set up repository variables in Bitbucket:
 
 - The Docker image runs as a non-root user for improved security
 - Always use secure environment variables in CI/CD pipelines for your credentials
-- Consider using refresh tokens for long-running pipelines 
+- Consider using refresh tokens for long-running pipelines