main.yml

name: Build & Deploy Godbolt Image

on:
  workflow_dispatch:

env:
  TAG: nano-2022
  entry: pwsh.exe
  cmd: -NoLogo -NoProfile -ExecutionPolicy Bypass

jobs:
  build-and-push:
    runs-on: windows-2022

    outputs:
      image_tagged: ${{ steps.vars.outputs.image_tagged }}

    defaults:
      run:
        shell: pwsh

    steps:
    - name: Checkout Repository
      uses: actions/checkout@v4

    - name: Set image tag
      id: vars
      run: |
        $repo = $env:GITHUB_REPOSITORY.ToLower()
        $imageBase = "ghcr.io/$repo"
        $taggedImage = "${imageBase}:${env:TAG}"
        "image_tagged=$taggedImage" >> $env:GITHUB_OUTPUT

    - name: Log in to GHCR
      run: echo "${{ secrets.CR_PAT }}" | docker login ghcr.io -u $env:GITHUB_ACTOR --password-stdin

    - name: Build Image
      run: |
        docker build `
          --isolation process `
          -t "${{ steps.vars.outputs.image_tagged }}" .

    - name: Push Image
      run: |
        docker push "${{ steps.vars.outputs.image_tagged }}"

  run-nano-container:
    needs: build-and-push
    runs-on: windows-2022

    defaults:
      run:
        shell: pwsh

    steps:
    - name: Pull Image
      run: docker pull "${{ needs.build-and-push.outputs.image_tagged }}"

    - name: Run Container
      run: docker run --entrypoint cmd --isolation process -di --name orphan "${{ needs.build-and-push.outputs.image_tagged }}" ${{ env.cmd }}

    - name: Inspect Container
      run: docker inspect orphan

    - name: Container – Inspect Godbolt Dist
      run: docker exec orphan cmd /c node --import=tsx --no-warnings=ExperimentalWarning ./app.js --version --dist