ci(docker): move docker build to the actions

Author: Halfi

.github/workflows/registry.yml

@@ -8,21 +8,80 @@ on:
 env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
-  BUILDX_VERSIONS: linux/amd64
+  BUILDX_VERSIONS: linux/amd64,linux/arm64,linux/arm/v7
+  GO_VERSION: 1.17
 
 jobs:
-  build-and-push-image:
+  build-go:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      packages: write
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v2
         with:
           fetch-depth: 2
 
+      - name: Setup go
+        id: go
+        uses: actions/setup-go@v2
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - name: Cache go
+        uses: actions/cache@v2.1.6
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
+      - name: Cache app build
+        id: app_cache
+        uses: actions/cache@v2.1.6
+        with:
+          path: ./bin/
+          key: ${{ runner.os }}-webapp-${{ hashFiles('bin') }}
+
+      - name: Build go binaries
+        run: |
+          export CGO_ENABLED=0
+          for TARGETPLATFORM in $( echo ${{ env.BUILDX_VERSIONS }} | tr -s ',' ' ' ); do
+             time go build -ldflags="-d -s -w" -o ./bin/${TARGETPLATFORM}/postmanq -a cmd/postmanq/main.go &
+             time go build -ldflags="-d -s -w" -o ./bin/${TARGETPLATFORM}/pmq-grep -a cmd/tools/pmq-grep/main.go &
+             time go build -ldflags="-d -s -w" -o ./bin/${TARGETPLATFORM}/pmq-publish -a cmd/tools/pmq-publish/main.go &
+             time go build -ldflags="-d -s -w" -o ./bin/${TARGETPLATFORM}/pmq-report -a cmd/tools/pmq-report/main.go &
+             time go build -ldflags="-d -s -w" -o ./bin/${TARGETPLATFORM}/healthcheck -a cmd/healthcheck/main.go &
+          done
+          wait
+
+      - uses: actions/upload-artifact@v2
+        with:
+          name: application
+          path: |
+            ./bin/
+            ./build/
+            ./config.yaml
+
+  build-and-publish-image:
+    needs: build-go
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        include:
+          - docker: postman
+            tagSuffix: ""
+          - docker: postman/alpine
+            tagSuffix: "-alpine"
+    permissions:
+      packages: write
+    steps:
+      - uses: actions/download-artifact@v2
+        with:
+          name: application
+
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v1
 
@@ -45,6 +104,8 @@ jobs:
             type=ref,event=branch
             type=ref,event=pr
             type=semver,pattern={{major}}.{{minor}}.{{patch}}
+          flavor: |
+            suffix=${{ matrix.tagSuffix }},onlatest=true
 
       - name: Cache Docker layers
         uses: actions/cache@v2.1.6
@@ -59,6 +120,7 @@ jobs:
         id: docker_build
         uses: docker/build-push-action@v2
         with:
+          file: build/${{ matrix.docker }}/Dockerfile
           context: .
           cache-from: type=local,src=/tmp/.buildx-cache
           cache-to: type=local,dest=/tmp/.buildx-cache-new

Dockerfile

@@ -0,0 +1,36 @@
+FROM golang:1.17-alpine as builder
+
+RUN addgroup -g 1001 postmanq && \
+    adduser -S -u 1001 -G postmanq postmanq && \
+    mkdir /app
+
+ARG TARGETPLATFORM
+COPY ./bin/${TARGETPLATFORM}/ /app/
+COPY ./config.yaml /etc/postman.yaml
+
+RUN chown -R 1001:1001 /app && \
+    chown 1001:1001 /etc/postman.yaml && \
+    chmod +x /app/*
+
+FROM scratch
+WORKDIR /
+
+COPY --from=builder /etc/passwd /etc/passwd
+COPY --from=builder /etc/group /etc/group
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=builder /usr/local/go/lib/time/zoneinfo.zip /usr/local/go/lib/time/zoneinfo.zip
+COPY --from=builder /etc/postman.yaml /etc/postman.yaml
+COPY --from=builder /app/postmanq /postmanq
+COPY --from=builder /app/pmq-grep /pmq-grep
+COPY --from=builder /app/pmq-publish /pmq-publish
+COPY --from=builder /app/pmq-report /pmq-report
+COPY --from=builder /app/healthcheck /healthcheck
+
+USER postmanq:postmanq
+
+ENV PORT=1080
+EXPOSE $PORT
+
+HEALTHCHECK --interval=5s --timeout=1s --start-period=2s --retries=3 CMD [ "/healthcheck" ]
+
+CMD ["/postmanq", "-f", "/etc/postman.yaml"]

build/postman/Dockerfile

@@ -0,0 +1,35 @@
+FROM golang:1.17-alpine as builder
+
+RUN addgroup -g 1001 postmanq && \
+    adduser -S -u 1001 -G postmanq postmanq && \
+    mkdir /app
+
+ARG TARGETPLATFORM
+COPY ./bin/${TARGETPLATFORM}/ /app/
+COPY ./config.yaml /etc/postman.yaml
+
+RUN chown -R 1001:1001 /app && \
+    chown 1001:1001 /etc/postman.yaml && \
+    chmod +x /app/*
+
+FROM alpine:3.14
+WORKDIR /
+
+COPY --from=builder /etc/passwd /etc/passwd
+COPY --from=builder /etc/group /etc/group
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=builder /usr/local/go/lib/time/zoneinfo.zip /usr/local/go/lib/time/zoneinfo.zip
+COPY --from=builder /etc/postman.yaml /etc/postman.yaml
+COPY --from=builder /app/postmanq /usr/bin/postmanq
+COPY --from=builder /app/pmq-grep /usr/bin/pmq-grep
+COPY --from=builder /app/pmq-publish /usr/bin/pmq-publish
+COPY --from=builder /app/pmq-report /usr/bin/pmq-report
+
+USER postmanq:postmanq
+
+ENV PORT=1080
+EXPOSE $PORT
+
+HEALTHCHECK --interval=5s --timeout=1s --start-period=2s --retries=3 CMD wget -nv -t1 --spider http://localhost:${PORT}/health || exit 1
+
+CMD ["/usr/bin/postmanq", "-f", "/etc/postman.yaml"]

build/postman/alpine/Dockerfile

@@ -0,0 +1,27 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"os"
+	"time"
+)
+
+func main() {
+	ctx, cancel := context.WithTimeout(context.Background(), time.Minute)
+	req, err := http.NewRequestWithContext(ctx, "GET", fmt.Sprintf("http://127.0.0.1:%s/health", os.Getenv("PORT")), nil)
+	if err != nil {
+		cancel()
+		os.Exit(1)
+	}
+
+	res, err := http.DefaultClient.Do(req)
+	if err != nil {
+		cancel()
+		os.Exit(1)
+	}
+
+	_ = res.Body.Close()
+	cancel()
+}