Add CircleCI config

Author: cfra

.circleci/config.yml

@@ -0,0 +1,80 @@
+version: 2.1
+orbs:
+  docker-publish: circleci/docker-publish@0.1.7
+  shellcheck: circleci/shellcheck@1.3.11
+
+x-aliases:
+  docker-publish-args: &docker-publish-args
+    requires:
+      - shellcheck/check
+    registry: $DOCKER_REGISTRY
+    image: $DOCKER_IMAGE
+    after_build:
+      - run:
+          name: Test generated image
+          command: ./test.sh
+  filter-only-develop: &filter-only-develop
+    filters:
+      branches:
+        only:
+          - develop
+  filter-only-master: &filter-only-master
+    filters:
+      branches:
+        only:
+          - master
+  filter-except-main: &filter-except-main
+    filters:
+      branches:
+        ignore:
+          - develop
+          - master
+  filter-only-tagged: &filter-only-tagged
+    filters:
+      branches:
+        ignore:
+          - /.*/
+      tags:
+        only:
+          - /.*/
+  filter-branch-or-tagged: &filter-branch-or-tagged
+    filters:
+      tags:
+        only:
+          - /.*/
+
+workflows:
+  version: 2
+  build:
+    jobs:
+      - shellcheck/check:
+          <<: *filter-branch-or-tagged
+          pre-steps:
+            - run:
+                name: "Install git and SSH client"
+                command: |
+                  apk add \
+                      --update-cache \
+                      --no-progress \
+                      git \
+                      openssh-client
+      - docker-publish/publish:
+          name: docker-build-branch
+          <<: *docker-publish-args
+          <<: *filter-except-main
+          deploy: false
+      - docker-publish/publish:
+          name: docker-build-and-publish-develop
+          <<: *docker-publish-args
+          <<: *filter-only-develop
+          tag: edge
+      - docker-publish/publish:
+          name: docker-build-and-publish-master
+          <<: *docker-publish-args
+          <<: *filter-only-master
+          tag: latest
+      - docker-publish/publish:
+          name: docker-build-and-publish-release
+          <<: *docker-publish-args
+          <<: *filter-only-tagged
+          tag: $CIRCLE_TAG

build.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+set -e
+set -u
+set -o pipefail
+
+cd "$(dirname "$0")"
+
+exec docker build -t git-crypt .

test.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+
+set -e
+set -u
+set -o pipefail
+
+cd "$(dirname "$0")"
+
+if [ -z "${CI:-}" ]; then
+    DOCKER_IMAGE_SPEC="git-crypt"
+else
+    # When we are running on CircleCI, retrieve the image and tag which we just built.
+    # This is a bit hacky, but we don't have access to the parameters passed to docker-publish/build.
+    DOCKER_IMAGE_SPEC="$(docker images --format "{{.Repository}}:{{.Tag}}" | grep "${DOCKER_IMAGE}:")"
+fi
+
+echo "==> Checking if git-crypt is present in the image..." >&2
+if docker run --rm "$DOCKER_IMAGE_SPEC" help > /dev/null; then
+    echo "==> git-crypt found." >&2
+else
+    echo "==> git-crypt seems to be broken!" >&2
+    exit 1
+fi
+
+echo "==> Checking if git is present in the image..." >&2
+if docker run --entrypoint=/usr/bin/git --rm "$DOCKER_IMAGE_SPEC" version | grep -q 'git version'; then
+    echo "==> Git found." >&2
+else
+    echo "==> Git seems to be broken!" >&2
+    exit 1
+fi