build tiny docker images

Containerfile

@@ -0,0 +1,80 @@
+FROM rust:latest AS builder
+
+# install build-time deps
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    lld \ 
+    libclang-dev liburing-dev
+
+# Set up Rust toolchain
+WORKDIR /app
+COPY ./rust-toolchain.toml .
+RUN rustc --version
+
+# Developer tool versions
+# renovate: datasource=github-releases depName=cargo-binstall packageName=cargo-bins/cargo-binstall
+ENV BINSTALL_VERSION=1.10.17
+# renovate: github-releases depName=cargo-sbom packageName=psastras/sbom-rs
+ENV CARGO_SBOM_VERSION=0.9.1
+
+RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
+RUN cargo binstall --no-confirm cargo-sbom --version $CARGO_SBOM_VERSION
+
+# Get source
+COPY . .
+
+# Build binary
+# We disable incremental compilation to save disk space, as it only produces a minimal speedup for this case.
+ENV CARGO_INCREMENTAL=0
+
+ARG TARGET_CPU
+RUN if [ -n "${TARGET_CPU}" ]; then \
+    echo "CFLAGS='-march=${TARGET_CPU}'" >> /etc/environment && \
+    echo "CXXFLAGS='-march=${TARGET_CPU}'" >> /etc/environment && \
+    echo "RUSTFLAGS='-C target-cpu=${TARGET_CPU}'" >> /etc/environment; \
+fi
+
+RUN mkdir /out
+RUN --mount=type=cache,target=/usr/local/cargo/registry \
+    --mount=type=cache,target=/usr/local/cargo/git/db \
+    --mount=type=cache,target=/app/target \
+    . /etc/environment && \
+    cargo build --locked --release && \
+    cp ./target/release/conduwuit /out/app
+
+RUN cargo sbom > /out/sbom.spdx.json
+
+# find dynamically linked dependencies
+RUN mkdir /out/libs \
+    && ldd /out/app | grep '=>' | awk '{print $(NF-1)}' | xargs -I {} cp {} /out/libs/
+# libraries with a hardcoded path, like ld
+# (see for example https://github.com/vlang/v/issues/8682)
+# Excluding linux-vdso.so, as it is a part of the kernel
+RUN mkdir /out/libs-root \
+    && ldd /out/app | grep -v '=>' | grep -v 'linux-vdso.so' | awk '{print $(NF-1)}' | xargs -I {} install -D {} /out/libs-root{}
+# RUN ldd /out/app
+# ldd /out/app | grep -v 'linux-vdso.so' | awk '{print $(NF-1)}'
+# RUN ls /libs
+
+FROM scratch
+
+WORKDIR /
+
+# Copy root certs for tls into image
+# You can also mount the certs from the host
+# --volume /etc/ssl/certs:/etc/ssl/certs:ro
+COPY --from=rust:latest /etc/ssl/certs /etc/ssl/certs
+
+# Copy our build
+COPY --from=builder /out/app ./app 
+# Copy SBOM
+COPY --from=builder /out/sbom.spdx.json ./sbom.spdx.json
+
+# Copy hardcoded dynamic libraries
+COPY --from=builder /out/libs-root /
+# Copy dynamic libraries
+COPY --from=builder /out/libs /libs
+# Tell Linux where to find our libraries
+ENV LD_LIBRARY_PATH=/libs
+
+
+CMD ["/app"]