dev: publish with container workflow

Author: da2ce7

.github/workflows/container.yaml

@@ -1,22 +1,23 @@
-name: Container (Docker)
+name: Container
 
 on:
   push:
+    tags-ignore:
+      - "!v*"
   pull_request:
+    branches:
+      - "develop"
+      - "main"
 
 env:
   CARGO_TERM_COLOR: always
 
 jobs:
   test:
-    name: Test
+    name: Test (Docker)
     runs-on: ubuntu-latest
 
     steps:
-      - id: checkout
-        name: Checkout Repository
-        uses: actions/checkout@v3
-
       - id: setup
         name: Setup Toolchain
         uses: docker/setup-buildx-action@v2
@@ -25,7 +26,6 @@ jobs:
         name: Build
         uses: docker/build-push-action@v4
         with:
-          context: .
           file: ./Containerfile
           push: false
           load: true
@@ -40,3 +40,61 @@ jobs:
       - id: compose
         name: Compose
         run: docker compose build
+
+  check-secret:
+    name: Check Secrets
+    needs: test
+    environment: dockerhub-torrust
+    runs-on: ubuntu-latest
+
+    outputs:
+      publish: ${{ steps.docker_hub.outputs.publish }}
+
+    steps:
+      - id: docker_hub
+        name: Docker Hub
+        env:
+          DOCKER_HUB_ACCESS_TOKEN: "${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}"
+        if: "${{ env.DOCKER_HUB_ACCESS_TOKEN != '' }}"
+        run: echo "publish=true" >> $GITHUB_OUTPUT
+
+  publish:
+    name: Publish
+    environment: dockerhub-torrust
+    needs: check-secret
+    if: needs.check-secret.outputs.publish == 'true'
+    runs-on: ubuntu-latest
+
+    steps:
+      - id: meta
+        name: Docker meta
+        uses: docker/metadata-action@v4
+        with:
+          images: |
+            "${{ secrets.DOCKER_HUB_USERNAME }}/${{secrets.DOCKER_HUB_REPOSITORY_NAME }}"
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+
+      - id: login
+        name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+      - id: setup
+        name: Setup Toolchain
+        uses: docker/setup-buildx-action@v2
+
+      - name: Build and push
+        uses: docker/build-push-action@v4
+        with:
+          file: ./Containerfile
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max