WIP: Build docker images on github actions

Author: ericmj

Diff for: .github/workflows/main.yml

@@ -5,16 +5,16 @@ on: [push, pull_request]
 jobs:
   test:
     name: Test
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
 
       - name: Install OTP and Elixir
         uses: erlef/setup-beam@v1
         with:
-          otp-version: 27.1.2
-          elixir-version: 1.17.3
+          otp-version: 27.2
+          elixir-version: 1.18.1
 
       - name: Install dependencies
         run: |
@@ -30,3 +30,52 @@ jobs:
       - name: Run tests
         run: |
           mix test --include typesense
+
+  docker:
+    name: Docker
+    runs-on: ubuntu-24.04
+
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+
+    env:
+      IMAGE_NAME: 'hexdocs'
+      PROJECT_ID: 'hexpm-prod'
+      SERVICE_ACCOUNT: ${{ secrets.GCLOUD_SERVICE_ACCOUNT }}
+      WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCLOUD_WORKFLOW_IDENTITY_POOL_PROVIDER }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set short git commit SHA
+        id: vars
+        run: |
+          calculatedSha=$(git rev-parse --short ${{ github.sha }})
+          echo "COMMIT_SHORT_SHA=$calculatedSha" >> $GITHUB_ENV
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Google auth
+        id: auth
+        uses: 'google-github-actions/auth@v2'
+        with:
+          token_format: 'access_token'
+          project_id: ${{ env.PROJECT_ID }}
+          service_account: ${{ env.SERVICE_ACCOUNT }}
+          workload_identity_provider: ${{ env.WORKLOAD_IDENTITY_PROVIDER }}
+
+      - name: Docker Auth
+        id: docker-auth
+        uses: 'docker/login-action@v1'
+        with:
+          registry: gcr.io
+          username: 'oauth2accesstoken'
+          password: '${{ steps.auth.outputs.access_token }}'
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: gcr.io/${{ env.PROJECT_ID }}/${{ env.IMAGE_NAME }}:${{ env.COMMIT_SHORT_SHA }}

Diff for: Dockerfile

@@ -1,6 +1,6 @@
-ARG ELIXIR_VERSION=1.17.3
+ARG ELIXIR_VERSION=1.18.1
 ARG ERLANG_VERSION=27.2
-ARG DEBIAN_VERSION=bookworm-20241202-slim
+ARG DEBIAN_VERSION=bookworm-20241223-slim
 
 FROM hexpm/elixir:${ELIXIR_VERSION}-erlang-${ERLANG_VERSION}-debian-${DEBIAN_VERSION} AS build