Add debian-bazel image and auto-publish workflow

Author: cartheur

.dockerignore

@@ -0,0 +1,4 @@
+.git
+.gitignore
+README.md
+LICENSE

.github/workflows/publish.yml

@@ -0,0 +1,35 @@
+name: Publish debian-bazel image
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: |
+            docker.io/cartheur/debian-bazel:latest

Dockerfile

@@ -0,0 +1,29 @@
+FROM debian:bullseye-slim
+
+ARG BAZELISK_VERSION=v1.20.0
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        ca-certificates \
+        curl \
+        file \
+        git \
+        gnupg \
+        openjdk-17-jdk-headless \
+        python3 \
+        unzip \
+        zip \
+        build-essential \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN curl -fsSL -o /usr/local/bin/bazel \
+      "https://github.com/bazelbuild/bazelisk/releases/download/${BAZELISK_VERSION}/bazelisk-linux-amd64" \
+    && chmod +x /usr/local/bin/bazel \
+    && ln -s /usr/local/bin/bazel /usr/local/bin/bazelisk
+
+ENV BAZELISK_HOME=/usr/local/share/bazelisk
+WORKDIR /workspace
+
+CMD ["bazel", "--version"]

README.md

@@ -1,2 +1,33 @@
 # debian-bazel
-A debian bullseye image with bazelbuild available to be used for building distroless images.
+
+Debian Bullseye image with Bazel available for building distroless images.
+
+## Build locally (Podman)
+
+```bash
+podman build -t docker.io/cartheur/debian-bazel:latest .
+```
+
+## Run locally (Podman)
+
+```bash
+podman run --rm docker.io/cartheur/debian-bazel:latest
+```
+
+## Push to Docker Hub (Podman)
+
+```bash
+podman login docker.io
+podman push docker.io/cartheur/debian-bazel:latest
+```
+
+## GitHub Actions auto-publish
+
+Workflow file: `.github/workflows/publish.yml`
+
+Set these repository secrets in GitHub:
+
+- `DOCKERHUB_USERNAME`: your Docker Hub username (`cartheur`)
+- `DOCKERHUB_TOKEN`: Docker Hub access token (not your password)
+
+The workflow pushes `docker.io/cartheur/debian-bazel:latest` on every push to `main`, and also supports manual run from the Actions tab.