ci: add testing

Author: ahze

.daemonless.yml .daemonless/config.yml.daemonless.yml renamed to .daemonless/config.yml

@@ -11,6 +11,7 @@ on:
 env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
+  CIT_VERSION: "0.2.2"
 
 jobs:
   build:
@@ -58,14 +59,59 @@ jobs:
               "https://raw.githubusercontent.com/daemonless/daemonless/build-intermediate-v1.0.0/scripts/build-intermediate.sh"
             chmod +x scripts/build-intermediate.sh
 
-            PUSH_FLAG=""
-            if [ "${{ github.event_name }}" != "pull_request" ]; then
-              PUSH_FLAG="--login --push"
-            fi
-
+            # Build (no push yet)
             ./scripts/build-intermediate.sh \
               --registry ${{ env.REGISTRY }} \
               --image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} \
               --base-version ${{ matrix.base_version }} \
-              --tags "${{ matrix.tags }}" \
-              $PUSH_FLAG
+              --tags "${{ matrix.tags }}"
+
+            # Test with cit (shell mode for base images)
+            echo "=== Running cit tests ==="
+            fetch -qo - https://github.com/daemonless/cit/releases/download/v${{ env.CIT_VERSION }}/cit-${{ env.CIT_VERSION }}.tar.gz | tar xz
+            ./cit-${{ env.CIT_VERSION }}/cit --setup
+
+            mkdir -p cit-results
+            ./cit-${{ env.CIT_VERSION }}/cit ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:build \
+              --mode shell \
+              --json cit-results/nginx-base-${{ matrix.base_version }}.json \
+              --verbose
+
+            # Push only after cit passes (non-PR)
+            if [ "${{ github.event_name }}" != "pull_request" ]; then
+              echo "=== Pushing image ==="
+              ./scripts/build-intermediate.sh \
+                --registry ${{ env.REGISTRY }} \
+                --image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} \
+                --base-version ${{ matrix.base_version }} \
+                --tags "${{ matrix.tags }}" \
+                --login --push
+            fi
+
+      - name: Upload test artifacts
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: cit-results-${{ matrix.base_version }}
+          path: cit-results/
+          retention-days: 30
+
+      - name: Discord notification
+        if: always() && (matrix.base_version == '15' || job.status == 'failure')
+        env:
+          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
+        run: |
+          if [ "${{ job.status }}" = "success" ]; then
+            COLOR=3066993
+            STATUS="✅ Success"
+          else
+            COLOR=15158332
+            STATUS="❌ Failed"
+          fi
+
+          SHORT_SHA="${{ github.sha }}"
+          SHORT_SHA="${SHORT_SHA:0:7}"
+
+          curl -sS -H "Content-Type: application/json" \
+            -d "{\"embeds\":[{\"title\":\"nginx-base:${{ matrix.base_version }} $STATUS\",\"url\":\"${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}\",\"color\":$COLOR,\"fields\":[{\"name\":\"Commit\",\"value\":\"[$SHORT_SHA](${{ github.server_url }}/${{ github.repository }}/commit/${{ github.sha }})\",\"inline\":true},{\"name\":\"Branch\",\"value\":\"${{ github.ref_name }}\",\"inline\":true},{\"name\":\"Registry\",\"value\":\"[ghcr.io](https://ghcr.io/${{ env.IMAGE_NAME }})\",\"inline\":true}]}]}" \
+            "$DISCORD_WEBHOOK"