name: Build Docker Node GCP Image

# cancel-in-progress is false to avoid orphaning blobs mid-push; see RELEASES.md.
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

on:
  push:
    branches:
      - main
      - 'release/v*'
  workflow_dispatch:

jobs:
  build-and-push-images:
    name: "Build and push Docker node gcp image with commit hash"
    runs-on: warp-ubuntu-2604-x64-16x
    environment: production
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          persist-credentials: false

      - name: Login to Docker Hub
        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          username: ${{ secrets.DOCKERHUB_USER }}
          password: ${{ secrets.DOCKERHUB_PAT }}

      - name: Allow unprivileged user namespaces (needed by repro-env)
        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

      - name: Install repro-env
        run: |
          sudo apt-get update
          sudo apt-get install -y repro-env

      - name: Build and push node gcp image
        run: |
          export NODE_GCP_IMAGE_NAME=mpc-node-gcp
          ./deployment/build-images.sh --node-gcp --push