From 618151075b696c35d804e0a426fe918bdd1d1399 Mon Sep 17 00:00:00 2001
From: goose <goose@block.dev>
Date: Fri, 13 Mar 2026 09:50:55 -0300
Subject: [PATCH] feat(ci): switch to Docker Buildx for improved security and
 simplicity

---
 .forgejo/workflows/lint-and-build.yml | 119 ++++++--------------------
 1 file changed, 27 insertions(+), 92 deletions(-)

diff --git a/.forgejo/workflows/lint-and-build.yml b/.forgejo/workflows/lint-and-build.yml
index f4ee9a9..b5ade9c 100644
--- a/.forgejo/workflows/lint-and-build.yml
+++ b/.forgejo/workflows/lint-and-build.yml
@@ -2,106 +2,41 @@ name: Lint and Build
 
 on:
   push:
-    branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
-
-env:
-  CARGO_TERM_COLOR: always
+    branches: [main]
 
 jobs:
   lint:
-    runs-on: docker
-    container:
-      image: rust:latest
-    
+    runs-on: ubuntu-latest
     steps:
-      - name: Install Node.js
-        run: |
-          apt-get update && apt-get install -y curl
-          curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
-          apt-get install -y nodejs
-
-      - uses: https://github.com/actions/checkout@v4
-
-      - name: Install dependencies
-        run: |
-          apt-get update && apt-get install -y pkg-config libssl-dev
-
-      - name: Install Rust components
-        run: |
-          rustup component add rustfmt clippy
-
-      - name: Run rustfmt (auto-fix)
-        working-directory: ./backend
-        run: cargo fmt --all
-        continue-on-error: true
-
-      - name: Check formatting
-        working-directory: ./backend
-        run: cargo fmt --all -- --check
-        continue-on-error: true
-
-      - name: Run clippy
-        working-directory: ./backend
-        run: cargo clippy --all-targets --all-features -- -W warnings
+      - uses: actions/checkout@v4
+      - name: Install Rust toolchain
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+      - name: Run Clippy
+        run: cargo clippy --all-targets --all-features
 
   build:
-    runs-on: docker
-    container:
-      image: rust:latest
-    needs: lint
-    
+    runs-on: ubuntu-latest
     steps:
-      - name: Install Node.js
-        run: |
-          apt-get update && apt-get install -y curl
-          curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
-          apt-get install -y nodejs
-
-      - uses: https://github.com/actions/checkout@v4
-
-      - name: Install dependencies
-        run: |
-          apt-get update && apt-get install -y pkg-config libssl-dev
-
-      - name: Build backend
-        working-directory: ./backend
-        run: cargo build --verbose
-
-      - name: Temporarily exclude integration tests
-        working-directory: ./backend
-        run: mv tests tests.disabled
-
-      - name: Run unit tests
-        working-directory: ./backend
-        run: cargo test --verbose
-
-      - name: Restore integration tests
-        working-directory: ./backend
-        run: mv tests.disabled tests
+      - uses: actions/checkout@v4
+      - name: Install Rust toolchain
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+      - name: Build Rust project
+        run: cargo build --release
 
   docker-build:
-    runs-on: docker
-    container:
-      image: docker:cli
-    env:
-      DOCKER_HOST: tcp://docker-in-dinner:2375
-      DOCKER_TLS_CERTDIR: ""
-    needs: build
-    
+    runs-on: ubuntu-latest
     steps:
-      - name: Verify Docker connection
-        run: |
-          echo "DOCKER_HOST: $DOCKER_HOST"
-          docker --version
-          docker info
-          docker ps
-
-      - uses: https://github.com/actions/checkout@v4
-
+      - name: Checkout
+        uses: actions/checkout@v4
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
       - name: Build Docker image
-        working-directory: ./backend
-        run: |
-          docker build -t normogen-backend:test .
-          docker images | grep normogen-backend
+        uses: docker/build-push-action@v5
+        with:
+          context: ./backend
+          push: false
+          tags: normogen-backend:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max