.build_with_buildkit:
  stage: build
  tags:
    - build
  image:
    name: moby/buildkit:v0.11.1-rootless
    entrypoint: [""]
  variables:
    BUILDKITD_FLAGS: "--oci-worker-no-process-sandbox"
  script:
    - |
      echo "Building and shipping image to $REGISTRY_IMAGE_NAME:$VERSIONLABEL"

      mkdir -p $HOME/.docker
      echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > $HOME/.docker/config.json

      CONTAINER_IMG_CACHE=$REGISTRY_IMAGE_NAME:buildcache

      buildctl-daemonless.sh build \
        --frontend dockerfile.v0 \
        --local context=$CI_PROJECT_DIR \
        --local dockerfile=docker \
        --opt filename=${DOCKER_FILE_NAME:-$SERVICE_NAME.dockerfile} \
        --opt target=${DOCKER_BUILD_TARGET:-production} \
        --opt build-arg:CI_COMMIT_REF_SLUG=$CI_COMMIT_REF_SLUG \
        --opt build-arg:CI_COMMIT_SHA=$CI_COMMIT_SHA \
        --output type=image,name=$REGISTRY_IMAGE_NAME:$VERSIONLABEL,push=true \
        --export-cache type=registry,ref=$CONTAINER_IMG_CACHE \
        --import-cache type=registry,ref=$CONTAINER_IMG_CACHE