ampcode-image.yml

# Copyright (c) 2025 Geoffrey Huntley <ghuntley@ghuntley.com>. All rights reserved.
# SPDX-License-Identifier: Proprietary

name: "build and publish: ampcode"

on:
  schedule:
    # Run every 6 hours
    - cron: '0 */6 * * *'
  workflow_dispatch: # Allow manual triggers

jobs:
  build-and-push:
    name: Build & Push Ampcode Image
    runs-on: namespace-profile-cached-amd64
    permissions:
      contents: read
      packages: write

    steps:
      - name: Create Dockerfile
        run: |
          cat > Dockerfile << 'EOF'
          FROM ubuntu:24.04

          RUN apt-get update && apt-get install -y \
              curl \
              ca-certificates \
              git \
              sudo \
              && rm -rf /var/lib/apt/lists/*

          RUN useradd -m -s /bin/bash ubuntu && \
              echo "ubuntu ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers

          USER ubuntu
          WORKDIR /home/ubuntu

          RUN curl -fsSL https://ampcode.com/install.sh | bash

          ENV PATH="/home/ubuntu/.amp/bin:${PATH}"

          CMD ["bash"]
          EOF

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: ghcr.io/ghuntley/loom/ampcode:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max