portainer/.drone-home.jsonnet

local util = {
  fromSecret(secret): {
    from_secret: secret,
  },
  printEnv(file, env): function(step) step {
    environment +: {
      [std.asciiHigher(env)]: util.fromSecret(
        std.asciiLower(
          std.strReplace(
            env,
            '_',
            '-',
          ),
        ),
      ),
    },
    settings +: {
      envs +: [
        std.asciiLower(env),
      ],
      script +: [
        'echo "export %(environment)=\'$${%(environment)s}\'" >> %(file) # %(secret)s' % {
          environment: std.asciiHigher(env),
          file: file,
          secret: std.asciiLower(
            std.strReplace(
              env,
              '_',
              '-',
            ),
          ),
        },
      ],
    },
  },
};
local images = {
  docker: {
    name: 'docker',
    image: 'docker:dind',
  },
  scp(target): {
    name: 'scp',
    image: 'appleboy/drone-scp',
    settings: {
      host: {
        from_secret: 'ssh-host',
      },
      username: {
        from_secret: 'ssh-user',
      },
      password: {
        from_secret: 'ssh-password',
      },
      port: {
        from_secret: 'ssh-port',
      },
      command_timeout: '2m',
      target: target,
      source: [
        '.',
      ],
    },
  },
  ssh: {
    image: 'appleboy/drone-ssh',
    settings: {
      host: util.fromSecret("ssh-host"),
      port: util.fromSecret("ssh-port"),
      username: util.fromSecret("ssh-user"),
      password: util.fromSecret("ssh-password"),
      script: [],
    },
  },
  wait(delay): {
    image: 'alpine',
    name: 'wait',
    commands: [
      'sleep %s' % delay,
    ],
  }
};
[
  {
    kind: 'pipeline',
    type: 'docker',
    name: 'build',
    clone: {
      disable: false,
      depth: 0,
    },
    services: [
      images.docker {
        privileged: true,
        volumes: [
          {
            name: 'dockersock',
            path: '/var/run',
          },
          {
            name: 'ca',
            path: '/etc/docker/certs.d',
          },
        ],
      },
    ],
    volumes: [
      {
        name: 'dockersock',
        temp: {},
      },
      {
        name: 'ca',
        host: {
          path: '/etc/docker/certs.d',
        },
      },
      {
        name: 'ssh',
        host: {
          path: '/home/giles/.ssh'
        },
      },
    ],
    steps:[
      images.scp(
        '/stack/root'
      ),
      images.wait(15),
      images.printEnv(
        'afile',
        'ssh_host',
      )(
        images.ssh {
          name: 'will print ssh-host',
        },
      )
    ],
  }
]