justme
490b008a57
Build musl and glibc for amd64 and arm64 through one native package path. Reuse musl outputs for OCI images and OpenWrt installers, and export binaries inside a rootless unshare session. Restore the executable dependency graph into a shared persistent NuGet cache, build managed dependencies once, and run isolated native publishes in parallel. Clean temporary outputs and expired image layers under store locks, retire inactive legacy stores after seven days, and retain two toolchain exports. Add regression coverage for staging, extraction, packaging and cleanup boundaries.
66 lines
3.9 KiB
Docker
66 lines
3.9 KiB
Docker
# Cross-compile Linux binaries on amd64; consumers package these outputs directly.
|
|
ARG NATIVEAOT_BUILDER_IMAGE=localhost/moshiro-dotnet10-nativeaot-aotanywhere:ci
|
|
FROM --platform=linux/amd64 ${NATIVEAOT_BUILDER_IMAGE} AS toolchain
|
|
FROM toolchain AS restore
|
|
WORKDIR /src/backend
|
|
COPY restore/backend/ ./
|
|
ARG NODE_RID=linux-musl-x64
|
|
ARG STATIC_MSQUIC=true
|
|
ENV NUGET_PACKAGES=/root/.nuget/packages
|
|
# Layer hits skip restore. A dependency change still reuses downloaded packages.
|
|
# Seed an empty cache from the baked toolchain instead of downloading SDK/Zig again.
|
|
RUN --mount=type=cache,id=moshiro-nuget,target=/root/.nuget/packages,sharing=locked \
|
|
--mount=type=bind,from=toolchain,source=/root/.nuget/packages,target=/opt/nuget-seed,ro \
|
|
cp -a --update=none /opt/nuget-seed/. /root/.nuget/packages/ \
|
|
&& dotnet restore Agent.Native.proj -r "$NODE_RID" -p:PublishAot=true -p:UseAotAnywhere=true -p:SelfContained=true \
|
|
-p:StaticMsQuic="$STATIC_MSQUIC" -p:StaticExecutable="$STATIC_MSQUIC" \
|
|
-p:RuntimeFrameworkVersion=10.0.12 -p:InvariantGlobalization=true --artifacts-path /artifacts
|
|
|
|
FROM restore AS managed
|
|
COPY source/backend/ ./
|
|
COPY source/packaging/native/msquic/ /src/packaging/native/msquic/
|
|
ARG APP_VERSION=0.0.0-dev
|
|
ARG MOSHIRO_TAG=
|
|
ARG MOSHIRO_COMMIT=
|
|
ARG MOSHIRO_BUILT_AT=
|
|
ENV MOSHIRO_TAG=$MOSHIRO_TAG MOSHIRO_COMMIT=$MOSHIRO_COMMIT MOSHIRO_BUILT_AT=$MOSHIRO_BUILT_AT
|
|
# Build the project graph once; both native publishes reuse these managed outputs.
|
|
RUN --mount=type=cache,id=moshiro-nuget,target=/root/.nuget/packages,ro \
|
|
dotnet build Agent.Native.proj -m:3 -c Release -r "$NODE_RID" --no-restore \
|
|
-p:PublishAot=true -p:UseAotAnywhere=true -p:SelfContained=true -p:Version="$APP_VERSION" \
|
|
-p:StaticMsQuic="$STATIC_MSQUIC" -p:StaticExecutable="$STATIC_MSQUIC" \
|
|
-p:RuntimeFrameworkVersion=10.0.12 -p:InvariantGlobalization=true \
|
|
-p:UseAppHost=true -p:StripSymbols=true -p:DebugType=none -p:DebugSymbols=false --artifacts-path /artifacts
|
|
|
|
FROM managed AS build-agent
|
|
RUN --mount=type=cache,id=moshiro-nuget,target=/root/.nuget/packages,ro \
|
|
dotnet publish agent/src/MoShiro.Agent -m:3 -c Release -r "$NODE_RID" \
|
|
--self-contained true --no-build --no-restore -p:PublishAot=true -p:UseAotAnywhere=true \
|
|
-p:Version="$APP_VERSION" -p:StaticMsQuic="$STATIC_MSQUIC" -p:StaticExecutable="$STATIC_MSQUIC" \
|
|
-p:RuntimeFrameworkVersion=10.0.12 -p:InvariantGlobalization=true -p:UseAppHost=true -p:StripSymbols=true \
|
|
-p:DebugType=none -p:DebugSymbols=false --artifacts-path /artifacts -o /out/agent \
|
|
&& test -x /out/agent/moshiro-agent \
|
|
&& test "$(stat -c%s /out/agent/moshiro-agent)" -gt 2000000 \
|
|
&& if [ "$STATIC_MSQUIC" = true ]; then \
|
|
! readelf -l /out/agent/moshiro-agent | grep -q INTERP \
|
|
&& ! readelf -d /out/agent/moshiro-agent 2>&1 | grep -q NEEDED; \
|
|
fi
|
|
|
|
FROM managed AS build-enroll
|
|
RUN --mount=type=cache,id=moshiro-nuget,target=/root/.nuget/packages,ro \
|
|
dotnet publish fleet/tools/fleet-enroll -m:3 -c Release -r "$NODE_RID" \
|
|
--self-contained true --no-build --no-restore -p:PublishAot=true -p:UseAotAnywhere=true \
|
|
-p:Version="$APP_VERSION" -p:StaticMsQuic="$STATIC_MSQUIC" -p:StaticExecutable="$STATIC_MSQUIC" \
|
|
-p:RuntimeFrameworkVersion=10.0.12 -p:InvariantGlobalization=true -p:UseAppHost=true -p:StripSymbols=true \
|
|
-p:DebugType=none -p:DebugSymbols=false --artifacts-path /artifacts -o /out/enroll \
|
|
&& test -x /out/enroll/fleet-enroll \
|
|
&& test "$(stat -c%s /out/enroll/fleet-enroll)" -gt 2000000 \
|
|
&& if [ "$STATIC_MSQUIC" = true ]; then \
|
|
! readelf -l /out/enroll/fleet-enroll | grep -q INTERP \
|
|
&& ! readelf -d /out/enroll/fleet-enroll 2>&1 | grep -q NEEDED; \
|
|
fi
|
|
|
|
FROM scratch AS binaries
|
|
COPY --from=build-agent /out/agent/moshiro-agent /out/agent/moshiro-agent
|
|
COPY --from=build-enroll /out/enroll/fleet-enroll /out/enroll/fleet-enroll
|