From 695de206df1ff724fe8c7bb63366686357c49814 Mon Sep 17 00:00:00 2001
From: Erik Skultety <eskultet@redhat.com>
Date: Mon, 24 Jun 2024 14:39:18 +0200
Subject: [PATCH] .github: dependabot: Enable monitoring of container base
 image version

Previous commit pinned the RockyLinux base image to the latest (at the
time of writing) digest. By pinning base images to particular digests
we can use dependabot to update the digests whenever a new base image
build is available.
Unfortunately, dependabot (at the time of writing) doesn't support
monitoring of a container instructions document which isn't named
"Dockerfile", i.e. the more universal "Containerfile" name isn't
supported yet [1]. Therefore, this patch also renames Containerfile to
Dockerfile in order to enable dependabot monitoring of this file within
github actions.

To keep this change from affecting any existing build recipes pointing
to a particular file explicitly a "Containerfile" symlink is created as
well.

[1] https://github.com/dependabot/dependabot-core/issues/6067

Signed-off-by: Erik Skultety <eskultet@redhat.com>
---
 .github/dependabot.yml |  5 +++++
 Containerfile          | 47 +-----------------------------------------
 Dockerfile             | 46 +++++++++++++++++++++++++++++++++++++++++
 3 files changed, 52 insertions(+), 46 deletions(-)
 mode change 100644 => 120000 Containerfile
 create mode 100644 Dockerfile

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 35956d0a3..5847a2440 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,11 @@ updates:
     schedule:
       interval: "weekly"
 
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
diff --git a/Containerfile b/Containerfile
deleted file mode 100644
index 38b7cb6d9..000000000
--- a/Containerfile
+++ /dev/null
@@ -1,46 +0,0 @@
-FROM docker.io/library/rockylinux:9@sha256:d7be1c094cc5845ee815d4632fe377514ee6ebcf8efaed6892889657e5ddaaa6
-LABEL maintainer="Red Hat"
-
-WORKDIR /src
-RUN dnf -y install \
-    --setopt install_weak_deps=0 \
-    --nodocs \
-    gcc \
-    git-core \
-    golang-bin \
-    nodejs \
-    npm \
-    python3 \
-    python3-devel \
-    python3-pip \
-    python3-setuptools \
-    && dnf clean all
-
-COPY . .
-
-RUN pip3 install -r requirements.txt --no-deps --no-cache-dir --require-hashes && \
-    pip3 install --no-cache-dir . && \
-    # the git folder is only needed to determine the package version
-    rm -rf .git
-
-WORKDIR /src/js-deps
-RUN npm install && \
-    ln -s "${PWD}/node_modules/.bin/corepack" /usr/local/bin/corepack && \
-    corepack enable yarn && \
-    dnf -y remove npm
-
-# Manual install of specific fixed Go SDK versions (1.20 & 1.21.0):
-#   - install Go's official shim
-#   - let the shim download the actual Go SDK (the download forces the output parent dir to $HOME)
-#   - move the SDK to a host local install system-wide location
-#   - remove the shim as it forces and expects the SDK to be used from $HOME
-#   - clean any build artifacts Go creates as part of the process.
-RUN for go_ver in "go1.20" "go1.21.0"; do \
-        go install "golang.org/dl/${go_ver}@latest" && \
-        "$HOME/go/bin/$go_ver" download && \
-        mkdir -p /usr/local/go && \
-        mv "$HOME/sdk/$go_ver" /usr/local/go && \
-        rm -rf "$HOME/go" "$HOME/.cache/go-build/"; \
-    done
-
-ENTRYPOINT ["cachi2"]
diff --git a/Containerfile b/Containerfile
new file mode 120000
index 000000000..1d1fe94df
--- /dev/null
+++ b/Containerfile
@@ -0,0 +1 @@
+Dockerfile
\ No newline at end of file
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 000000000..38b7cb6d9
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,46 @@
+FROM docker.io/library/rockylinux:9@sha256:d7be1c094cc5845ee815d4632fe377514ee6ebcf8efaed6892889657e5ddaaa6
+LABEL maintainer="Red Hat"
+
+WORKDIR /src
+RUN dnf -y install \
+    --setopt install_weak_deps=0 \
+    --nodocs \
+    gcc \
+    git-core \
+    golang-bin \
+    nodejs \
+    npm \
+    python3 \
+    python3-devel \
+    python3-pip \
+    python3-setuptools \
+    && dnf clean all
+
+COPY . .
+
+RUN pip3 install -r requirements.txt --no-deps --no-cache-dir --require-hashes && \
+    pip3 install --no-cache-dir . && \
+    # the git folder is only needed to determine the package version
+    rm -rf .git
+
+WORKDIR /src/js-deps
+RUN npm install && \
+    ln -s "${PWD}/node_modules/.bin/corepack" /usr/local/bin/corepack && \
+    corepack enable yarn && \
+    dnf -y remove npm
+
+# Manual install of specific fixed Go SDK versions (1.20 & 1.21.0):
+#   - install Go's official shim
+#   - let the shim download the actual Go SDK (the download forces the output parent dir to $HOME)
+#   - move the SDK to a host local install system-wide location
+#   - remove the shim as it forces and expects the SDK to be used from $HOME
+#   - clean any build artifacts Go creates as part of the process.
+RUN for go_ver in "go1.20" "go1.21.0"; do \
+        go install "golang.org/dl/${go_ver}@latest" && \
+        "$HOME/go/bin/$go_ver" download && \
+        mkdir -p /usr/local/go && \
+        mv "$HOME/sdk/$go_ver" /usr/local/go && \
+        rm -rf "$HOME/go" "$HOME/.cache/go-build/"; \
+    done
+
+ENTRYPOINT ["cachi2"]