ci: docker release workflow

.dockerignore

@@ -0,0 +1 @@
+target/

.github/workflows/docker.yml

@@ -0,0 +1,117 @@
+name: docker release
+
+on:
+  push:
+    branches:
+      - master
+      - stable
+      - docker-release
+    tags:
+
+jobs:
+  pop-runner-instance:
+    name: create and setup infrastructure for branch
+    runs-on: ubuntu-latest
+    env:
+      ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      AWS_REGION: ${{ secrets.AWS_REGION }}
+      EC2_SECRET: ${{ secrets.EC2_PWD }}
+      S3_BACKEND_KEY_NAME: tf-state-${{ github.sha }}-docker
+    steps:
+      - name: checkout code
+        uses: actions/[email protected]
+      - name: setup node
+        uses: actions/setup-node@v2
+        with:
+          node-version: '14'
+      - uses: hashicorp/setup-terraform@v1
+        with:
+          terraform_version: 0.12.25
+      - name: rewrite tf state key
+        working-directory: ./infrastructure
+        run: sed -i 's/BRANCH_ACTOR_KEY/${{ env.S3_BACKEND_KEY_NAME }}/g' infra.tf
+      - name: Terraform Init
+        working-directory: ./infrastructure
+        run: terraform init
+      - name: Terraform plan
+        working-directory: ./infrastructure
+        run: terraform plan -var="ec2_pwd=$EC2_SECRET" -var="branch_name=${{ github.sha }}-docker"
+      - name: Terraform apply
+        working-directory: ./infrastructure
+        run: terraform apply -var="ec2_pwd=$EC2_SECRET" -var="branch_name=${{ github.sha }}-docker" -auto-approve
+      - name: Sleep for 20 seconds
+        uses: jakejarvis/wait-action@master
+        with:
+          time: '20s'
+
+  docker-build:
+    runs-on: ${{ format('{0}-docker', github.sha) }}
+    needs: pop-runner-instance
+    env:
+      DOCKER_CLI_EXPERIMENTAL: enabled
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - name: Describe version
+        run: git describe --tags --abbrev=0
+      - name: Extract branch name
+        shell: bash
+        run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
+        id: extract_branch
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      - name: Login
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ secrets.PKG_USER }}
+          password: ${{ secrets.PKG_PWD }}
+      - name: Build and push
+        id: docker_build
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ghcr.io/galacticcouncil/hydra-dx:${{ steps.extract_branch.outputs.branch }}
+      - name: Image digest
+        run: echo ${{ steps.docker_build.outputs.digest }}
+
+  destroy-runner-instance:
+    name: destroy infra
+    runs-on: ubuntu-latest
+    needs: docker-build
+    if: always()
+    env:
+      ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      AWS_REGION: ${{ secrets.AWS_REGION }}
+      EC2_SECRET: ${{ secrets.EC2_PWD }}
+      S3_BACKEND_KEY_NAME: tf-state-${{ github.sha }}-docker
+    steps:
+      - name: checkout code
+        uses: actions/[email protected]
+      - name: setup node
+        uses: actions/setup-node@v2
+        with:
+          node-version: '14'
+      - uses: hashicorp/setup-terraform@v1
+        with:
+          terraform_version: 0.12.25
+          continue-on-error: false
+      - name: rewrite tf state key
+        working-directory: ./infrastructure
+        run: sed -i 's/BRANCH_ACTOR_KEY/${{ env.S3_BACKEND_KEY_NAME }}/g' infra.tf
+      - name: Terraform Init
+        working-directory: ./infrastructure
+        run: terraform init
+      - name: Terraform apply
+        working-directory: ./infrastructure
+        run: terraform destroy -var="ec2_pwd=$EC2_SECRET" -var="branch_name=${{ github.sha }}-docker" -auto-approve

Dockerfile

@@ -0,0 +1,26 @@
+FROM rust:latest as builder
+
+RUN apt update && apt install -y git clang curl libssl-dev llvm libudev-dev
+
+WORKDIR /build
+
+COPY . /build
+
+RUN cargo build --release
+
+FROM debian:buster-slim
+LABEL org.opencontainers.image.source = "https://github.com/galacticcouncil/HydraDX-node"
+COPY --from=builder /build/target/release/hydra-dx /usr/local/bin
+
+RUN useradd -m -u 1000 -U -s /bin/sh -d /hydra hydra && \
+	mkdir -p /hydra/.local/share && \
+	mkdir /data && \
+	chown -R hydra:hydra /data && \
+	ln -s /data /hydra/.local/share/hydra-dx && \
+	rm -rf /usr/bin /usr/sbin
+
+USER hydra
+EXPOSE 30333 9933 9944
+VOLUME ["/data"]
+
+CMD ["/usr/local/bin/hydra-dx","--chain","lerna"]

infrastructure/infra.tf

@@ -27,7 +27,7 @@ variable "ec2_pwd" {
 
 
 resource "aws_instance" "runner-aws" {
-    ami = "ami-04f71779ae623a544"
+    ami = "ami-058872f0d7afad104"
     instance_type = "c5ad.4xlarge"
     subnet_id = "subnet-0ba99ac0d4aea3dc6"
     key_name = "aws-ec2-key"
@@ -52,4 +52,4 @@ resource "aws_instance" "runner-aws" {
         "tmux new -d 'bash run_conf.sh ${var.branch_name}'"
         ]
     }
-}
+}

stack.yml

@@ -0,0 +1,17 @@
+version: '3.3'
+services:
+  node:
+    image: ghcr.io/galacticcouncil/hydra-dx:docker-release
+    command: hydra-dx --chain lerna
+    volumes:
+      - data:/data
+    networks:
+      - default
+    logging:
+      driver: json-file
+networks:
+  default:
+    driver: overlay
+volumes:
+  data:
+    driver: local