stages:
  - verify
  - build
  - deploy

variables:
  GIT_STRATEGY: clone
  GIT_DEPTH: "500"

lint:
  stage: verify
  interruptible: true
  script:
    - |
      sudo apk add shellcheck atools doas abuild
      export PATH="$PATH:$CI_PROJECT_DIR/.gitlab/bin"
      lint
  allow_failure: true
  only:
    - merge_requests
  tags:
    - apk-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME

build:
  stage: build
  interruptible: true
  script:
    - |
      sudo apk add alpine-sdk lua-aports doas
      doas addgroup $USER abuild
      export PATH="$PATH:$CI_PROJECT_DIR/.gitlab/bin"
      sudo -Eu $USER build.sh
  artifacts:
    paths:
      - packages/
      - keys/
      - logs/
    expire_in: 7 days
    when: always
  only:
    - merge_requests
  tags:
    - apk-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME

push:
  interruptible: true
  stage: deploy
  needs:
    - job: build
      artifacts: true
  script:
    - |
      sudo apk add abuild git-lfs
      export PATH="$PATH:$CI_PROJECT_DIR/.gitlab/bin"
      push.sh
  rules:
    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
      when: manual
  tags:
    - apk-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME