name: Build Installer ISO

on:
  workflow_dispatch:
  push:
    branches:
      - main

jobs:
  build-iso:
    runs-on: ubuntu-latest

    permissions:
      contents: read
      packages: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Prepare output directory
        run: mkdir -p output

      - name: Pull base image
        run: |
          # Falls das Repository privat ist, hier vorher ein 'podman login' einfügen
          sudo podman pull ghcr.io/humocs-man/fluffy-pancake:stable

      - name: Build ISO with bootc-image-builder
        run: |
          sudo podman run --rm --privileged \
            -v .:/workspace \
            -v ./output:/output \
            -v /var/lib/containers/storage:/var/lib/containers/storage \
            quay.io/centos-bootc/bootc-image-builder:latest \
            --config /workspace/iso/config.toml \
            --type anaconda-iso \
            --output /output/ \
            ghcr.io/humocs-man/fluffy-pancake:stable

      - name: Upload ISO artifact
        uses: actions/upload-artifact@v4
        with:
          name: installer-iso
          # Wir nutzen Wildcards, da der Builder die ISO oft in 
          # einen Unterordner wie 'output/anaconda/' legt.
          path: output/**/disk.iso
          if-no-files-found: error