[4/5] GiteaでCI/CDパイプラインを構築する ビルド編

.
├── Dockerfile
├── README.md
├── package-lock.json
├── package.json
├── src
│   ├── app.test.ts
│   ├── app.ts
│   ├── index.ts
│   ├── sum.test.ts
│   └── sum.ts
├── tsconfig.json
└── vitest.config.ts

# ビルドステージ
FROM node:24.14.1 AS build
WORKDIR /app

# 依存関係をインストールする
COPY package.json package-lock.json ./
RUN npm ci

# ソースコードをコピーしてビルドする
COPY . .
RUN npm run build

# プロダクションステージ
FROM node:24.14.1-slim AS production
ENV NODE_ENV=production
WORKDIR /app

# 本番用の依存関係のみインストールする
COPY package.json package-lock.json ./
RUN npm ci --omit=dev

# ビルド成果物をコピーする
COPY --from=build /app/dist ./dist

# アプリケーションを起動する
CMD ["node", "dist/index.js"]

# Dockerイメージをビルドする
$ docker build -t $(node -p "require('./package.json').name"):$(node -p "require('./package.json').version") .
[+] Building 8.1s (18/18) FINISHED
 => [internal] load build definition from Dockerfile
 => => transferring dockerfile: 793B
 => [internal] load metadata for docker.io/library/node:24.14.1-slim
 => [internal] load metadata for docker.io/library/node:24.14.1
# 以下略

# Dockerイメージの一覧を確認する
$ docker images
IMAGE              ID             DISK USAGE   CONTENT SIZE   EXTRA
cicd-example:1.0.0 2fa08a2e94f6        227MB             0B

# Dockerコンテナを起動する
$ docker run -p 3030:3000 cicd-example:1.0.0
Server is running on http://localhost:3000

name: Workflow
on:
  push:
    branches:
      - main # mainブランチに対して実行する
env:
  NODE_VERSION: "24.14.1" # 使用するNode.jsのバージョンを定義する
jobs:
  typecheck:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v5
      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
      - name: Install dependencies
        run: npm ci
      - name: Run typecheck
        run: npm run typecheck
  test:
    needs: typecheck # typecheckが通ったら実行する
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v5
      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
      - name: Install dependencies
        run: npm ci
      - name: Run test
        run: npm run test
  build:
    runs-on: ubuntu-latest
    needs: [typecheck, test] # typecheckとtestが通ったら実行する
    steps:
      - name: Checkout
        uses: actions/checkout@v5
      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      # Docker BuildxにHTTPのコンテナレジストリへのpushを許可する
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          buildkitd-config-inline: |
            [registry."${{ vars.REGISTRY_ENDPOINT }}"]
              http = true
              insecure = true
      # コンテナレジストリへの認証情報を設定する
      - name: Log in to Gitea container registry
        run: |
          mkdir -p ~/.docker
          AUTH=$(echo -n "${{ gitea.actor }}:${{ secrets.PERSONAL_ACCESS_TOKEN }}" | base64 -w 0)
          echo "{\"auths\":{\"${{ vars.REGISTRY_ENDPOINT }}\":{\"auth\":\"$AUTH\"}}}" > ~/.docker/config.json
      - name: Build and push
        run: |
          IMAGE_NAME=$(node -p "require('./package.json').name")
          TAG_NAME=$(node -p "require('./package.json').version")
          docker buildx build \
            --platform linux/amd64,linux/arm64 \
            --tag ${{ vars.REGISTRY_ENDPOINT }}/${{ gitea.repository_owner }}/$IMAGE_NAME:$TAG_NAME \
            --tag ${{ vars.REGISTRY_ENDPOINT }}/${{ gitea.repository_owner }}/$IMAGE_NAME:latest \
            --cache-from type=registry,ref=${{ vars.REGISTRY_ENDPOINT }}/${{ gitea.repository_owner }}/$IMAGE_NAME:buildcache \
            --cache-to type=registry,ref=${{ vars.REGISTRY_ENDPOINT }}/${{ gitea.repository_owner }}/$IMAGE_NAME:buildcache,mode=max \
            --provenance=false \
            --push \
            .

$ git add -A
$ git commit -m "buildのジョブを定義した"
$ git push

$ docker run -p 3030:3000 ${Giteaホスト}/kkawaharanet/cicd-example:latest

$ docker run -p 3030:3000 xxx.xxx.xxx.xxx:yyyy/kkawaharanet/cicd-example:latest
Unable to find image 'xxx.xxx.xxx.xxx:yyyy/kkawaharanet/cicd-example:latest' locally
docker: Error response from daemon: Get "https://xxx.xxx.xxx.xxx:yyyy/v2/": http: server gave HTTP response to HTTPS client

Run 'docker run --help' for more information

{
  "insecure-registries": ["xxx.xxx.xxx.xxx:yyyy"]
}

sudo systemctl restart docker.service docker.socket

$ docker run -p 3030:3000 xxx.xxx.xxx.xxx:yyyy/kkawaharanet/cicd-example:latest
Server is running on http://localhost:3000