CI: Add image workflow

.dockerignore

@@ -0,0 +1,32 @@
+# Include any files or directories that you don't want to be copied to your
+# container here (e.g., local build artifacts, temporary files, etc.).
+#
+# For more help, visit the .dockerignore file reference guide at
+# https://docs.docker.com/go/build-context-dockerignore/
+
+**/.DS_Store
+**/.classpath
+**/.dockerignore
+**/.env
+**/.git
+**/.gitignore
+**/.project
+**/.settings
+**/.toolstarget
+**/.vs
+**/.vscode
+**/*.*proj.user
+**/*.dbmdl
+**/*.jfm
+**/charts
+**/docker-compose*
+**/compose*
+**/Dockerfile*
+**/node_modules
+**/npm-debug.log
+**/secrets.dev.yaml
+**/values.dev.yaml
+/bin
+/target
+LICENSE
+README.md

.github/workflows/image.yml

@@ -0,0 +1,44 @@
+name: Image
+
+on:
+ workflow_run:
+ workflows:
+ - CI Checks
+ types:
+ - completed
+
+jobs:
+ publish-docker-image:
+ name: Build & Publish Docker Image
+ if: ${{ github.event.workflow_run.conclusion == 'success' }}
+ runs-on: self-hosted
+
+ steps:
+ - uses: actions/checkout@v3
+
+ - name: Set up QEMU
+ uses: docker/setup-qemu-action@v2
+
+ - name: Set up Docker Buildx
+ uses: docker/setup-buildx-action@v2
+
+ - name: Login to GitHub Container Registry
+ uses: docker/login-action@v2
+ if: ${{ github.ref_name == 'main' }}
+ with:
+ registry: ghcr.io
+ username: ${{ github.actor }}
+ password: ${{ secrets.GH_PAT }}
+
+ - name: Set lower case owner name
+ run: |
+ echo "OWNER_LC=${OWNER,,}" >>${GITHUB_ENV}
+ env:
+ OWNER: "${{ github.repository_owner }}"
+
+ - name: Build and Push Docker Image
+ uses: docker/build-push-action@v3
+ with:
+ platforms: linux/amd64,linux/arm64/v8
+ context: .
+ push: ${{ github.ref_name == 'main' }}

Dockerfile

@@ -0,0 +1,52 @@
+ARG RUST_VERSION=1.80.0
+ARG APP_NAME=syn-ack
+
+FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.3.0 AS xx
+
+FROM --platform=$BUILDPLATFORM rust:${RUST_VERSION}-alpine AS build
+ARG APP_NAME
+WORKDIR /app
+
+COPY --from=xx / /
+
+RUN apk add --no-cache clang lld musl-dev git file
+
+ARG TARGETPLATFORM
+
+RUN xx-apk add --no-cache musl-dev gcc
+
+RUN --mount=type=bind,source=src,target=src \
+ --mount=type=bind,source=crates,target=crates \
+ --mount=type=bind,source=Cargo.toml,target=Cargo.toml \
+ --mount=type=bind,source=Cargo.lock,target=Cargo.lock \
+ --mount=type=bind,source=tests,target=tests \
+ --mount=type=bind,source=test-utils,target=test-utils \
+ --mount=type=cache,target=/app/target/,id=rust-cache-${APP_NAME}-${TARGETPLATFORM} \
+ --mount=type=cache,target=/usr/local/cargo/git/db \
+ --mount=type=cache,target=/usr/local/cargo/registry/ \
+xx-cargo build --locked --release --target-dir ./target && \
+cp ./target/$(xx-cargo --print-target-triple)/release/$APP_NAME /bin/server && \
+xx-verify /bin/server
+
+FROM alpine:3.18 AS final
+
+LABEL org.opencontainers.image.source="https://github.com/pesca-dev/syn-ack"
+
+ARG UID=10001
+RUN adduser \
+ --disabled-password \
+ --gecos "" \
+ --home "/nonexistent" \
+ --shell "/sbin/nologin" \
+ --no-create-home \
+ --uid "${UID}" \
+ appuser
+USER appuser
+
+COPY --from=build /bin/server /bin/
+
+ENV ROCKET_ADDRESS=0.0.0.0
+
+EXPOSE 8000
+
+CMD ["/bin/server"]