first

.dockerignore

+/cert
+.git*
+Dockerfile
+.dockerignore
+docker-compose.*

.gitignore

+/cert
+docker-compose.*

Dockerfile

+FROM prabhakarpujeri/racadm-docker
+WORKDIR /app
+COPY ./run.sh ./
+ENV CERT_PATH=/app/cert
+ENV IDRAC_HOST=localhost
+ENV IDRAC_USER=root
+ENV IDRAC_PASSWORD=calvin
+CMD ./run.sh

gitlab-ci.yml

+stages:
+  - build
+  - combine
+  - deploy
+variables:
+  GIT_DEPTH: "1"
+  CONTAINER_TEST_IMAGE: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
+  CONTAINER_RELEASE_IMAGE: $CI_REGISTRY_IMAGE:latest
+before_script:
+  - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
+build-x86:
+  stage: build
+  tags:
+    - docker
+  script:
+    - TARGET_IMAGE=$CONTAINER_TEST_IMAGE
+    - docker build --pull -t $TARGET_IMAGE .
+    - docker push $TARGET_IMAGE
+build-arm:
+  stage: build
+  tags:
+    - docker-arm
+  script:
+    - TARGET_IMAGE=$CONTAINER_TEST_ARM_IMAGE
+    - docker build --pull -t $TARGET_IMAGE .
+    - docker push $TARGET_IMAGE
+combine:
+  stage: combine
+  tags:
+    - docker
+  script:
+    - TARGET_IMAGE=$CONTAINER_TEST_IMAGE
+    - SOURCE_IMAGE_2=$CONTAINER_TEST_ARM_IMAGE
+    - SOURCE_IMAGE_1=$CONTAINER_TEST_X86_IMAGE
+    - docker pull $SOURCE_IMAGE_1
+    - docker pull $SOURCE_IMAGE_2
+    - docker manifest create $TARGET_IMAGE --amend $SOURCE_IMAGE_1 --amend
+      $SOURCE_IMAGE_2
+    - docker manifest push $TARGET_IMAGE
+deploy_latest:
+  stage: deploy
+  tags:
+    - docker
+  script:
+    - TARGET_IMAGE=$CONTAINER_RELEASE_IMAGE
+    - SOURCE_IMAGE=$CONTAINER_TEST_IMAGE
+    - docker pull $SOURCE_IMAGE
+    - docker tag $SOURCE_IMAGE $TARGET_IMAGE
+    - docker push $TARGET_IMAGE
+  only:
+    - master
+deploy_tag:
+  stage: deploy
+  tags:
+    - docker
+  script:
+    - TARGET_IMAGE=$CI_REGISTRY_IMAGE:$CI_COMMIT_TAG
+    - SOURCE_IMAGE=$CONTAINER_TEST_IMAGE
+    - docker pull $SOURCE_IMAGE
+    - docker tag $SOURCE_IMAGE $TARGET_IMAGE
+    - docker push $TARGET_IMAGE
+  only:
+    - tags

run.sh

+#!/bin/bash
+set -o errexit
+RACADM=/opt/dell/srvadmin/sbin/racadm
+
+# CERT_PATH
+# IDRAC_HOST
+# IDRAC_USER
+# IDRAC_PASS
+fullChain="$CERT_PATH/fullchain.pem"
+privKey="$CERT_PATH/privkey.pem"
+
+echo "Checking certificates on $IDRAC_HOST..."
+
+certSerial="$(openssl x509 -in $fullChain -noout -serial | cut -d= -f2)"
+echo "Cert serial: $certSerial"
+idracSerial="$($RACADM -r $IDRAC_HOST -u $IDRAC_USER -p $IDRAC_PASS sslcertview -t 1 | grep 'Serial Number' | awk '{print $6}')"
+echo "IDRAC serial: $idracSerial"
+
+if [[ "$certSerial" == "$idracSerial" ]]; then
+  echo "Cert is same, skipping."
+  exit 0
+fi
+
+echo "Updating cert on $IDRAC_HOST..."
+
+$RACADM -r $IDRAC_HOST -u $IDRAC_USER -p $IDRAC_PASS sslkeyupload -t 1 -f $privKey
+$RACADM -r $IDRAC_HOST -u $IDRAC_USER -p $IDRAC_PASS sslcertupload -t 1 -f $fullChain
+$RACADM -r $IDRAC_HOST -u $IDRAC_USER -p $IDRAC_PASS racreset
+
+echo "Done."