feat(#93): add latest mainline docker build

.github/workflows/docker.yml

@@ -0,0 +1,22 @@
+name: Create and publish Docker image
+
+on:
+  push:
+    branches:
+      - 'main'
+
+jobs:
+  call_build-and-push-image:
+    permissions:
+      contents: read
+      packages: write
+    uses: eurofurence/reg-workflows/.github/workflows/docker-build-push.yml@main
+    with:
+      image-name: ${{ github.repository }}
+      image-tags: latest
+      full-repo-url: https://github.com/${{ github.repository }}
+      branch-or-tag-name: ${{ github.ref_name }}
+      commit-hash: ${{ github.sha }}
+      registry-user: ${{ github.actor }}
+    secrets:
+      registry-pass: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/go.yml

@@ -20,7 +20,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v2
       with:
-        go-version: 1.18
+        go-version: '1.20'
 
     - name: Build
       run: go build -v ./...

Dockerfile

@@ -0,0 +1,18 @@
+FROM golang:1 as build
+
+COPY . /app
+WORKDIR /app
+
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" cmd/main.go
+
+RUN chmod 755 main
+
+FROM scratch
+
+COPY --from=build /app/main /main
+COPY --from=build /etc/ssl/certs /etc/ssl/certs
+
+# run as an unprivileged unnamed user that has no write permissions on the binary
+USER 8877
+
+ENTRYPOINT ["/main"]