labels:
  ci: domain-linux-native
  platform: linux/amd64

clone:
  - name: git
    image: plugin-git
    settings:
      lfs: false
      # 要拿到 tag 才算得出开发版本号（ci/version.sh：自最近 tag 的提交数）
      tags: true

when:
  - event: push
    branch: main
    evaluate: 'CI_COMMIT_MESSAGE contains "[CI]"'

# 镜像构建和 verify（后端快速测试）、web-build 并行跑，不再等它们：构建好之后、推送之前由 ci/wait-for-checks.sh 等这两个 workflow 都成功
# （任何一个失败就不推；提交信息写 [SKIP TESTS] 只跳过后端测试，verify 照样是成功）。机器有 6 个 workflow 槽（WOODPECKER_MAX_WORKFLOWS），三个同时跑放得下。

concurrency: 1

steps:
  - name: build-linux-amd64-backend
    image: bash
    environment:
      NUGET_PACKAGES: /home/justme/woodpecker/cache/nuget/packages
      ZOT_REGISTRY: registry.oeo.one
      ZOT_USERNAME: justme
      ZOT_SECRET:
        from_secret: zot_secret
      RELEASE_API_URL: https://mo.oeo.one
      RELEASE_SIGNING_KEY:
        from_secret: release_signing_key
    commands:
      - bash ci/build-dev-image.sh backend
    depends_on: []

  - name: build-linux-amd64-agent
    image: bash
    environment:
      ZOT_REGISTRY: registry.oeo.one
      ZOT_USERNAME: justme
      ZOT_SECRET:
        from_secret: zot_secret
      RELEASE_API_URL: https://mo.oeo.one
      RELEASE_SIGNING_KEY:
        from_secret: release_signing_key
    commands:
      - bash ci/build-dev-image.sh agent
    depends_on: []

  - name: build-linux-amd64-probe
    image: bash
    environment:
      ZOT_REGISTRY: registry.oeo.one
      ZOT_USERNAME: justme
      ZOT_SECRET:
        from_secret: zot_secret
      RELEASE_API_URL: https://mo.oeo.one
      RELEASE_SIGNING_KEY:
        from_secret: release_signing_key
    commands:
      - bash ci/build-dev-image.sh probe
    depends_on: []

  # Build both node architectures in parallel; publish both indexes together after all four builds.
  - name: build-linux-arm64-agent
    image: bash
    environment:
      ZOT_REGISTRY: registry.oeo.one
      ZOT_USERNAME: justme
      ZOT_SECRET:
        from_secret: zot_secret
      RELEASE_API_URL: https://mo.oeo.one
      RELEASE_SIGNING_KEY:
        from_secret: release_signing_key
    commands:
      - bash ci/build-dev-image.sh agent arm64
    depends_on: []

  - name: build-linux-arm64-probe
    image: bash
    environment:
      ZOT_REGISTRY: registry.oeo.one
      ZOT_USERNAME: justme
      ZOT_SECRET:
        from_secret: zot_secret
      RELEASE_API_URL: https://mo.oeo.one
      RELEASE_SIGNING_KEY:
        from_secret: release_signing_key
    commands:
      - bash ci/build-dev-image.sh probe arm64
    depends_on: []

  - name: publish-linux-node-indexes
    image: bash
    environment:
      ZOT_REGISTRY: registry.oeo.one
      ZOT_USERNAME: justme
      ZOT_SECRET:
        from_secret: zot_secret
      RELEASE_API_URL: https://mo.oeo.one
      RELEASE_SIGNING_KEY:
        from_secret: release_signing_key
    commands:
      - bash ci/publish-dev-node-indexes.sh
    depends_on:
      - build-linux-amd64-agent
      - build-linux-amd64-probe
      - build-linux-arm64-agent
      - build-linux-arm64-probe