chore: shrink niluv_node docker image

Author: mfontanini

.github/workflows/docker.yml

@@ -3,6 +3,8 @@ name: docker-build-push
 on:
   push:
     tags: [ "v*.*.*" ]
+  # TODO
+  pull_request:
   workflow_dispatch:
 env:
   REGISTRY: ghcr.io
@@ -11,25 +13,25 @@ env:
 jobs:
   build-and-push:
     name: Build and Push Docker Images
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
       packages: write
-
     strategy:
+      fail-fast: false
       matrix:
-        target:
-          - niluv_node
+        include:
+          - arch: amd64
+            platform: linux/amd64
+            runner: ubuntu-latest
+          - arch: arm64
+            platform: linux/arm64
+            runner: ubuntu-24.04-arm
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          submodules: recursive
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          platforms: linux/arm64
+          fetch-depth: 0
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -45,24 +47,25 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/${{ matrix.target }}
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/niluv_node
           tags: |
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}
             type=sha,prefix=sha-
             type=raw,value=latest,enable={{is_default_branch}}
 
-      - name: Build and push Docker image (${{ matrix.target }})
+      - name: Build and push Docker image
         id: build
         uses: docker/build-push-action@v5
         with:
           context: .
-          file: ./docker/Dockerfile
-          target: ${{ matrix.target }}
-          push: true
+          file: ./docker/niluv_node.dockerfile
+          # TODO
+          # push: true
+          push: false
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha,scope=${{ matrix.target }}
-          cache-to: type=gha,mode=max,scope=${{ matrix.target }}
-          platforms: linux/amd64,linux/arm64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          provenance: false

docker/niluv_node.dockerfile

@@ -0,0 +1,23 @@
+FROM rust:1.91-alpine AS builder
+
+WORKDIR /app
+
+RUN apk add --no-cache musl-dev git pkgconf openssl-dev
+
+COPY Cargo.toml ./
+COPY src ./src
+COPY config ./config
+COPY data ./data
+
+RUN RUSTFLAGS="-Ctarget-feature=-crt-static" cargo build --release --bin niluv_node && \
+  mkdir -p /out/bin && \
+  mv target/release/niluv_node /out/bin/
+
+FROM alpine
+
+RUN apk add libgcc openssl
+USER appuser
+WORKDIR /app
+
+COPY --from=builder /out/bin/niluv_node /usr/local/bin/niluv_node
+ENTRYPOINT ["/usr/local/bin/niluv_node"]