Alternative ATProto PDS implementation
Add docker release pipeline
+59
-3
+53
.github/workflows/rel.yaml
+53
.github/workflows/rel.yaml
···
1
+
name: Release
2
+
3
+
on:
4
+
push:
5
+
branches:
6
+
- main
7
+
8
+
env:
9
+
REGISTRY: ghcr.io
10
+
IMAGE_NAME: ${{ github.repository }}
11
+
CARGO_TERM_COLOR: always
12
+
13
+
jobs:
14
+
build-and-push:
15
+
runs-on: ubuntu-latest
16
+
17
+
permissions:
18
+
contents: read
19
+
packages: write
20
+
attestations: write
21
+
id-token: write
22
+
23
+
steps:
24
+
- uses: actions/checkout@v4
25
+
26
+
- name: Log into the container registry
27
+
uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
28
+
with:
29
+
registry: ${{ env.REGISTRY }}
30
+
username: ${{ github.actor }}
31
+
password: ${{ secrets.GITHUB_TOKEN }}
32
+
33
+
- name: Extract metadata (tags, labels) for Docker
34
+
id: meta
35
+
uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
36
+
with:
37
+
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
38
+
39
+
- name: Build and push Docker image
40
+
id: push
41
+
uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
42
+
with:
43
+
context: .
44
+
push: true
45
+
tags: ${{ steps.meta.outputs.tags }}
46
+
labels: ${{ steps.meta.outputs.labels }}
47
+
48
+
- name: Generate artifact attestation
49
+
uses: actions/attest-build-provenance@v2
50
+
with:
51
+
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
52
+
subject-digest: ${{ steps.push.outputs.digest }}
53
+
push-to-registry: true
+2
-3
Dockerfile
+2
-3
Dockerfile
···
1
1
FROM rust:alpine AS builder
2
2
3
-
COPY .env /build/
3
+
COPY .sqlx /build/.sqlx
4
4
COPY Cargo.lock /build/
5
5
COPY Cargo.toml /build/
6
6
COPY src /build/src
···
12
12
13
13
RUN cargo build --release
14
14
RUN mkdir -p /app && \
15
-
mv target/release/bluepds /app/ && \
16
-
mv data /app/
15
+
mv target/release/bluepds /app/
17
16
18
17
FROM mcr.microsoft.com/cbl-mariner/distroless/minimal:2.0
19
18
+4
src/main.rs
+4
src/main.rs
···
337
337
.build()
338
338
.context("failed to build requester client")?;
339
339
340
+
tokio::fs::create_dir_all(&config.key.parent().unwrap())
341
+
.await
342
+
.context("failed to create key directory")?;
343
+
340
344
// Check if crypto keys exist. If not, create new ones.
341
345
let (skey, rkey) = if let Ok(f) = std::fs::File::open(&config.key) {
342
346
let keys: KeyData = serde_ipld_dagcbor::from_reader(std::io::BufReader::new(f))