#!/bin/sh
set -eu

if ! set -o pipefail 2>/dev/null; then
  :
fi

sh ci/pipelines/fx/ensure_env_version.sh
sed -i 's/\r$//' ./ci/prod/.env.runtime
sed -i 's/\r$//' ./.env.version

set -a
. ./ci/prod/.env.runtime
. ./.env.version
set +a

REGISTRY_URL="${REGISTRY_URL:?missing REGISTRY_URL}"
APP_V="${APP_V:?missing APP_V}"
FX_DOCKERFILE="${FX_DOCKERFILE:?missing FX_DOCKERFILE}"
FX_IMAGE_PATH="${FX_IMAGE_PATH:?missing FX_IMAGE_PATH}"

REGISTRY_HOST="${REGISTRY_URL#http://}"
REGISTRY_HOST="${REGISTRY_HOST#https://}"
REGISTRY_USER="$(cat secrets/REGISTRY_USER)"
REGISTRY_PASSWORD="$(cat secrets/REGISTRY_PASSWORD)"
: "${REGISTRY_USER:?missing registry user}"
: "${REGISTRY_PASSWORD:?missing registry password}"

mkdir -p /kaniko/.docker
AUTH_B64="$(printf '%s:%s' "$REGISTRY_USER" "$REGISTRY_PASSWORD" | base64 | tr -d '\n')"
cat <<EOF >/kaniko/.docker/config.json
{
  "auths": {
    "https://${REGISTRY_HOST}": { "auth": "${AUTH_B64}" }
  }
}
EOF

/kaniko/executor \
  --context "${PWD}" \
  --dockerfile "${FX_DOCKERFILE}" \
  --destination "${REGISTRY_URL}/${FX_IMAGE_PATH}:${APP_V}" \
  --build-arg APP_VERSION="${APP_V}" \
  --build-arg GIT_REV="${GIT_REV}" \
  --build-arg BUILD_BRANCH="${BUILD_BRANCH}" \
  --build-arg BUILD_DATE="${BUILD_DATE}" \
  --build-arg BUILD_USER="${BUILD_USER}" \
  --single-snapshot