PR.yml

name: BuildAndTest
on: [pull_request]

env:
  DOCKER_IMAGE: uwhackweek/snowex

jobs:
  build-image-without-pushing:
    runs-on: ubuntu-20.04
    steps:
    - name: Checkout PR
      uses: actions/checkout@v2

    - name: Build Only
      uses: jupyterhub/repo2docker-action@master
      with:
        NO_PUSH: 'true'
        IMAGE_NAME: ${{ env.DOCKER_IMAGE }}
        #MYBINDERORG_TAG: ${{ github.event.pull_request.head.ref }} #clutters output log

    - name: Report Image Size and Conda Packages
      run: |
        docker images
        docker run ${{ env.DOCKER_IMAGE }}:latest conda list --export
        docker run ${{ env.DOCKER_IMAGE }}:latest conda list --explicit > conda-linux-64.lock

    - name: Save conda lockfile
      uses: actions/upload-artifact@v2
      with:
        name: lockfile
        path: conda-linux-64.lock

    - name: Checkout JupyterBook Website
      uses: actions/checkout@v2
      with: 
       repository: snowex-hackweek/website

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: us-west-2
        role-to-assume: github-actions-role
        role-duration-seconds: 2400

    # NOTE: this gets picked up b/c of the docker run -v mount
    - name: Configure NASA Earthdata Login
      run: |
        echo "machine urs.earthdata.nasa.gov login ${{ secrets.EARTHDATA_LOGIN }} password ${{ secrets.EARTHDATA_PASSWORD }}" > .netrc
        chmod 0600 .netrc
    
    # NOTE github actions id: uid=1001(runner) gid=121(docker) groups=121(docker),4(adm),101(systemd-journal)
    # Docker volume mount requires uid matching host, so we change from default (jovyan uid=1000)
    - name: Build JupyterBook
      run: |
        docker run -u 1001 \
        -e AWS_REGION -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN \
        -v ${{ github.workspace }}:/home/jovyan:rw \
        $DOCKER_IMAGE jb build book
    
    - name: Save Build
      if: ${{ always() }}
      uses: actions/upload-artifact@v2
      with:
        name: build
        path: book/_build/