Initial compose work

.gitignore

@@ -0,0 +1,2 @@
+artifacts/
+secrets/

build/build-image.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+set -euxo pipefail
+
+mkdir -p /artifacts/dist
+export EPREFIX="/artifacts/dist"
+
+emerge --sync --quiet

compose.yml

@@ -0,0 +1,28 @@
+services:
+  build:
+    image: docker.io/gentoo/stage3
+    command: /build/build-image.sh
+    volumes:
+      - ./artifacts:/artifacts
+      - ./build:/build
+  sign:
+    image: docker.io/vladgh/gpg
+    command: --batch --import /run/secrets/signing_key_private --passphrase-file /run/secrets/signing_key_password
+    secrets:
+     - signing_key_password
+     - signing_key_private
+     - signing_key_public
+    volumes:
+     - ./artifacts:/artifacts
+  serve:
+    image: docker.io/halverneus/static-file-server
+    volumes:
+     - ./artifacts:/artifacts
+
+secrets:
+  signing_key_password:
+    file: secrets/signing_key_password.txt
+  signing_key_private:
+    file: secrets/HalogenOS_private.asc
+  signing_key_public:
+    file: secrets/HalogenOS_public.asc