chore: setup circleci for docker build (#18)

* Add .circleci/config.yml

* chore(ci): update Nx & Dockerfiles

* chore(ci): update circleci setup

* chore(ci): enable docker cache

* chore(ci): make image build on main only

* chore: pin ray version

Author: tonywu6

.circleci/config.yml

@@ -0,0 +1,61 @@
+# Use the latest 2.1 version of CircleCI pipeline process engine.
+# See: https://circleci.com/docs/configuration-reference
+version: 2.1
+
+# Define a job to be invoked later in a workflow.
+# See: https://circleci.com/docs/configuration-reference/#jobs
+jobs:
+  devcontainer-publish:
+    docker:
+      - image: cimg/base:stable
+    resource_class: xlarge
+
+    parameters:
+      platform:
+        type: string
+        default: linux/amd64
+      tag:
+        type: string
+        default: latest
+
+    steps:
+      - checkout
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+          name: Build and publish
+          command: |
+            export IMAGE_NAME=secretflow/secretnote:<< parameters.tag >>
+
+            docker buildx build \
+              --platform=<< parameters.platform >> \
+              -f docker/app/Dockerfile \
+              -t ${IMAGE_NAME} \
+              --progress=plain \
+              .
+
+            docker login -u secretflow -p ${DOCKER_DEPLOY_TOKEN}
+            docker push ${IMAGE_NAME}
+
+# Orchestrate jobs using workflows
+# See: https://circleci.com/docs/configuration-reference/#workflows
+workflows:
+  devcontainer-publish-amd64:
+    jobs:
+      - devcontainer-publish:
+          filters:
+            branches:
+              only:
+                - main
+          platform: linux/amd64
+          tag: unstable-amd64
+
+  devcontainer-publish-arm64:
+    jobs:
+      - devcontainer-publish:
+          filters:
+            branches:
+              only:
+                - main
+          platform: linux/arm64
+          tag: unstable-arm64