poimenandrock
d7a36ce9e8
## Optimize CI/CD Workflows ### Changes #### build.yaml - **Merge 3 cargo steps → 1 compile pass**: `cargo build`, `cargo test`, `cargo clippy` now run in single invocation, reusing compiled artifacts - **Remove `cargo clean`**: Eliminated wasteful step that deleted artifacts before Docker build - **Add secret validation**: Registry credentials checked before login (fail-fast) #### deploy.yaml - **Skip checkout**: Removed unnecessary git clone - **Fetch SHA via Gitea API**: Query latest commit directly instead of cloning - **Reuse existing token**: Use `FORGEJO_REGISTRY_TOKEN` for Gitea API auth (already has privileges) - **Validate image exists**: Check SHA image exists before tagging as latest (prevents tagging non-existent images) - **Add secret validation**: Registry credentials checked before login (fail-fast) #### migrate.yaml - **Merge schema verification**: Schema inspect result reused in both changed + manual paths - **Fix manual trigger errors**: Manual mode now fails on first migration error (was silently masking with `|| true`) - **Track failures**: Explicit FAILED flag tracks migration errors across loop ### Benefits - **Speed**: Fewer compiles, no unnecessary clones, reuse artifacts - **Reliability**: Secret validation catches configuration issues early - **Safety**: Image existence check prevents tagging phantom images - **Clarity**: Merged steps have descriptive names, explicit error handling ### Testing - Branch: `ci/optimize-workflows` - Ready to merge to `main` after review --------- Co-authored-by: rock <[email protected]> Reviewed-on: #51 Co-authored-by: poimen <[email protected]>
51 lines
1.1 KiB
Docker
51 lines
1.1 KiB
Docker
# Multi-stage build for Poimen Memory Service (Rust)
|
|
|
|
# Stage 1: Builder
|
|
FROM rust:1-bookworm as builder
|
|
|
|
WORKDIR /build
|
|
|
|
# Build settings
|
|
ENV SQLX_OFFLINE=true
|
|
|
|
# Copy source
|
|
COPY . .
|
|
|
|
# Build release binary with space-efficient cleanup
|
|
RUN cargo build --release -p mem-cli --locked && \
|
|
strip target/release/mem && \
|
|
# Aggressive cleanup to free disk space
|
|
rm -rf target/release/deps && \
|
|
rm -rf target/release/build && \
|
|
rm -rf target/release/incremental && \
|
|
rm -rf target/release/.fingerprint && \
|
|
rm -rf .cargo/registry/cache && \
|
|
rm -rf .cargo/registry/index && \
|
|
rm -rf .cargo/git
|
|
|
|
# Stage 2: Runtime
|
|
FROM debian:bookworm-slim
|
|
|
|
WORKDIR /app
|
|
|
|
# Install runtime dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
libssl3 \
|
|
postgresql-client \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /build/target/release/mem /app/mem
|
|
|
|
# Expose port
|
|
EXPOSE 8080
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=10s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD curl -f http://localhost:8080/health || exit 1
|
|
|
|
# Run
|
|
CMD ["/app/mem"]
|