Full CI/CD with Docker + GitHub Actions + DigitalOcean (Droplets + Container Registry)

Nowadays, CI/CD became an essential part when developing software. It can save tons of money, time and reduce risks… In this article, I will show you how did I set up CI/CD for my personal blog with free services.

If you are not familiar with any services, check their definitions:

• GitHub Action: A CI/CD platform of GitHub. https://docs.github.com/en/actions/learn-github-actions/understanding-github-actions
• DigitalOcean Container Registry: A place to store and manage private Docker images, have a free plan for 1 repository.
  https://www.digitalocean.com/products/container-registry/
• DigitalOcean Droplets: A virtual machine provider. Cheap, stable, and easy to set up.
  https://www.digitalocean.com/products/droplets/

Firstly, have a look at this workflow.

1. Every time we push a new commit to GitHub, it will start processing GitHub Actions workflow.
2. GitHub Actions will build a Docker image in its runner and push that image to Container Registry.
3. GitHub Actions then will connect to Droplets and deploy the image from Container Registry to that Droplets.

Let’s see how to set up this workflow.

Add Actions secrets

There are some secret variables that you need to use in the GitHub Action workflow.yml file, so it should be better if they are encrypted by storing them in Github Secrets.

You can go to repository Settings → Secrets → Actions, then click New repository secret.

There are some variables we need:

• DIGITALOCEAN_ACCESS_TOKEN: A token that you have generated to access the DigitalOcean API.
  From DigitalOcean dashboard → API → Token/keys → Generate New Token (Remember to check both Read and Write permission)
• HOST: your ssh host (Droplets ipv4)
• PASSPHRASE: to encrypt the private key, generated when you create ssh keys for Droplets.
• SSHKEY: the content of ssh private key. ex raw content of ~/.ssh/id_rsa
• USERNAME: ssh username, default: root

Now we have enough secret variables to use in our CI/CD workflow file.

Create a workflow YAML file

• Create a directory called .github/workflows in the repository directory.
• In that directory, create a new file called build-and-deploy.yml and add the following code:

1. Controlling when the workflow will run: In this case, every time we have a push in the master branch.
2. Define some environment variables that don’t need to be encrypted.
   - IMAGE_NAME: your Docker image name
   - REGISTRY: your DigitalOcean Registry Container URL

3. We have 2 jobs here: run build_and_push then after it finishes, run deploy.

Some things need to be noted in the YAML files:

• Because DigitalOcean Container Registry only has 500MB for the free plan, so we should remove all old images after we build and push the new image.
• When deploying, it is better to stop running the container, remove it then run the new image (will pull it from DigitalOcean Container Registry).

If you found this blog is helpful, please share and give some claps 👏👏👏

You can connect with me on LinkedIn and Twitter.

If you have any comments, questions, or recommendations, feel free to post them in the comment section below!