fix: update dockerfile and workflow

Author: Dave Altena

.github/workflows/ci.yaml

@@ -0,0 +1,58 @@
+---
+  name: Release
+  
+  on:
+    pull_request:
+    push:
+      branches: ["main"]
+    release:
+      types: ["published"]
+  
+  jobs:
+    build-image:
+      if: ${{ github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request' }}
+      runs-on: ubuntu-latest
+      permissions:
+        contents: read
+        packages: write
+      steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+  
+        - name: Docker meta
+          id: meta
+          uses: docker/metadata-action@v5
+          with:
+            images: |
+              ghcr.io/${{ github.repository }}
+            tags: |
+              type=semver,pattern={{version}},prefix=v
+              type=semver,pattern={{major}}.{{minor}},prefix=v
+              type=semver,pattern={{major}},prefix=v
+              type=ref,event=branch
+              type=ref,event=pr
+            flavor: |
+              latest=auto
+  
+        - name: Set up QEMU
+          uses: docker/setup-qemu-action@v3
+  
+        - name: Set up Docker Buildx
+          uses: docker/setup-buildx-action@v3
+  
+        - name: Login to GitHub Container Registry
+          uses: docker/login-action@v3
+          with:
+            registry: ghcr.io
+            username: ${{ github.actor }}
+            password: ${{ secrets.GITHUB_TOKEN }}
+  
+        - name: Build and Push
+          uses: docker/build-push-action@v6
+          with:
+            context: .
+            file: ./Dockerfile
+            platforms: linux/amd64 # TODO: arm64 builds take ~4 hours to complete
+            push: true
+            tags: ${{ steps.meta.outputs.tags }}
+            labels: ${{ steps.meta.outputs.labels }}

.github/workflows/release.yaml

@@ -1,33 +1,28 @@
-FROM lukemathwalker/cargo-chef:latest-rust-1.84.1-slim-bookworm AS chef
+FROM docker.io/lukemathwalker/cargo-chef:latest-rust-1.83.0-alpine3.21 AS chef
 WORKDIR /app
 
 FROM chef AS planner
 COPY . .
 RUN cargo chef prepare --recipe-path recipe.json
 
 FROM chef AS builder
-
-# Ensure working C compile setup (not installed by default in arm64 images)
-RUN apt update && apt install build-essential -y
-
+RUN apk add --no-cache build-base
 COPY --from=planner /app/recipe.json recipe.json
 RUN cargo chef cook --release --recipe-path recipe.json
-
 COPY . .
 RUN cargo build --release --bin atuin-server-sqlite-unofficial
 
-FROM debian:bookworm-20250113-slim AS runtime
-
-RUN useradd -c 'atuin user' atuin && mkdir /config && chown atuin:atuin /config
-# Install ca-certificates for webhooks to work
-RUN apt update && apt install ca-certificates sqlite3 -y && rm -rf /var/lib/apt/lists/*
-WORKDIR /app
-
-USER atuin
-
-ENV TZ=Etc/UTC
-ENV RUST_LOG=atuin::api=info
-ENV ATUIN_CONFIG_DIR=/config
-
+FROM docker.io/library/alpine:3.21
+ENV RUST_LOG=atuin::api=info \
+    TZ=Etc/UTC \
+    ATUIN_HOST=0.0.0.0 \
+    ATUIN_PORT=8888 \
+    ATUIN_CONFIG_DIR=/config \
+    ATUIN_DB_URI=sqlite:///config/atuin.db
+RUN apk add --no-cache ca-certificates catatonit sqlite-libs tzdata
+USER nobody:nogroup
+WORKDIR /config
+VOLUME ["/config"]
 COPY --from=builder /app/target/release/atuin-server-sqlite-unofficial /usr/local/bin
-ENTRYPOINT ["/usr/local/bin/atuin-server-sqlite-unofficial"]
+ENTRYPOINT ["/usr/bin/catatonit", "--", "/usr/local/bin/atuin-server-sqlite-unofficial"]
+CMD ["server", "start"]

Dockerfile

@@ -1,18 +1,3 @@
-# atuin sqlite
+# Atuin server sqlite
 
-atuin server but uses sqlite backend.
-
-## Support ⚠️
-
-While I am a maintainer of `atuin`, This is not an officially supported project and it mostly exists because people kept asking for it and
-it wasn't too hard to put here.
-
-## Usage
-
-```sh
-cargo install --release --git https://github.com/conradludgate/atuin-server-sqlite
-export ATUIN_DB_URI=sqlite://path/to/sqlite/file.db
-atuin-server-sqlite-unofficial
-```
-
-See the atuin self hosting docs for more info on settings.
+Also a project to learn multi-arch container builds.