ci: add sconification workflow

Author: jbern0rd

.github/workflows/sconify.yaml

@@ -0,0 +1,33 @@
+name: sconify
+
+on: push
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      IMG_FROM: docker-regis.iex.ec/tee-worker-post-compute:rust
+      IMG_TO: docker-regis.iex.ec/tee-worker-post-compute-unlocked:rust-sconify-5.9.0-debug
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Build the docker image
+        run: docker build -t $IMG_FROM .
+      - name: Login to Scontain registry
+        uses: docker/login-action@v3
+        with:
+          registry: registry.scontain.com
+          username: ${{ secrets.SCONTAIN_USERNAME }}
+          password: ${{ secrets.SCONTAIN_PASSWORD }}
+      - name: Sconify
+        run: scone/sconify.sh
+      - name: Login to Docker regis
+        uses: docker/login-action@v3
+        with:
+          registry: docker-regis.iex.ec
+          username: ${{ secrets.NEXUS_USERNAME }}
+          password: ${{ secrets.NEXUS_PASSWORD }}
+      - name: Publish
+        run: docker push $IMG_TO
+      - name: Clean
+        run: docker image rm -f $IMG_FROM $IMG_TO registry.scontain.com/scone-debug/iexec-sconify-image-unlocked:5.9.0

Dockerfile

@@ -0,0 +1,19 @@
+FROM rust:1.86-alpine3.21 AS builder
+
+RUN apk add --no-cache musl-dev openssl-dev
+
+WORKDIR /app
+
+COPY . /app
+
+RUN cargo build --release
+
+FROM alpine:3.21
+
+WORKDIR /app
+
+RUN apk add --no-cache libgcc
+
+COPY --from=builder /app/target/release/tee-worker-post-compute .
+
+CMD ["/app/tee-worker-post-compute"]

scone/sconify.args

@@ -0,0 +1,10 @@
+--verbose
+--name=tee-worker-post-compute
+--base=alpine:3.21
+--from=${IMG_FROM}
+--to=${IMG_TO}
+--binary=/app/tee-worker-post-compute
+--heap=1G
+--stack=8M
+--host-path=/etc/hosts
+--host-path=/etc/resolv.conf

scone/sconify.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+
+cd $(dirname $0)
+
+SCONE_IMG_NAME=scone-debug/iexec-sconify-image-unlocked
+SCONE_IMG_VERSION=5.9.0
+
+if [ -z "$IMG_FROM" ] || [ -z "$IMG_TO" ] ; then
+  echo "IMG_FROM and IMG_TO variables need to be defined"
+  exit 1
+fi
+
+ARGS=$(sed -e "s'\${IMG_FROM}'${IMG_FROM}'" -e "s'\${IMG_TO}'${IMG_TO}'" sconify.args)
+echo $ARGS
+
+SCONE_IMAGE="registry.scontain.com/${SCONE_IMG_NAME}:${SCONE_IMG_VERSION}"
+
+docker run -t --rm \
+    -v /var/run/docker.sock:/var/run/docker.sock \
+    ${SCONE_IMAGE} \
+        sconify_iexec \
+            --cli=${SCONE_IMAGE} \
+            --crosscompiler=${SCONE_IMAGE} \
+            $ARGS
+
+echo
+docker run --rm -e SCONE_HASH=1 $IMG_TO