sjg
7022f20b76
Rework container/ from a host-executor act_runner image into a single "SDK" build image used everywhere: as the CI job container (Docker executor) and by developers locally / via .devcontainer. It bakes in a pinned Rust toolchain and all build dependencies, so CI and every developer share the exact same rustc/clippy. - container/Containerfile: SDK image (Debian + deps + pinned Rust + Node). - rust-toolchain.toml: pin the toolchain to match the image; also ends the "CI clippy newer than local" version skew. - .gitea/workflows/ci.yml: lint/test run inside the SDK image via `container:`; reuse returns to fsfe/reuse-action (Docker executor runs it as a sibling container, so nothing REUSE-related is baked in). - .devcontainer/devcontainer.json: dev use of the same image. - container/runner-config.example.yaml: Docker-executor runner config for the CI VM, capped for a 2-thread budget. - Drop the obsolete host-executor entrypoint/config/Quadlet units. Assisted-By: Claude Code (claude-opus-4) Claude-Session: https://claude.ai/code/session_01NFpGtGTWUEYXLwZeZs2RAV Signed-off-by: Stan Grams <sjg@haxx.space>
47 lines
1.8 KiB
Docker
47 lines
1.8 KiB
Docker
# SPDX-FileCopyrightText: 2026 Stan Grams <sjg@haxx.space>
|
|
#
|
|
# SPDX-License-Identifier: GPL-2.0-or-later
|
|
|
|
# trx-rs SDK / build image.
|
|
#
|
|
# Single source of truth for the build environment. Used two ways:
|
|
# * CI — as the job container for the lint/test jobs (Docker executor).
|
|
# * Dev — run locally or via .devcontainer for a reproducible toolchain.
|
|
#
|
|
# Pinning the Rust version here (and in rust-toolchain.toml) means CI and every
|
|
# developer share the exact same rustc/clippy, so "works locally, fails in CI"
|
|
# cannot happen.
|
|
FROM docker.io/library/debian:bookworm-slim
|
|
|
|
# Keep in sync with rust-toolchain.toml.
|
|
ARG RUST_VERSION=1.97.1
|
|
ARG NODE_MAJOR=20
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive \
|
|
RUSTUP_HOME=/usr/local/rustup \
|
|
CARGO_HOME=/usr/local/cargo \
|
|
PATH=/usr/local/cargo/bin:/usr/local/bin:/usr/bin:/bin
|
|
|
|
# Build dependencies (mirror README's manual instructions).
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates curl git \
|
|
build-essential pkg-config cmake clang libclang-dev \
|
|
libopus-dev libasound2-dev libsoapysdr-dev chromium \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Node.js — JS-based actions (actions/checkout, actions/cache) run *inside*
|
|
# the job container under the Docker executor, so node must be present.
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash - \
|
|
&& apt-get install -y --no-install-recommends nodejs \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Pinned Rust toolchain, installed world-readable so any UID the runner or a
|
|
# devcontainer uses can invoke cargo.
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \
|
|
| sh -s -- -y --no-modify-path \
|
|
--default-toolchain "${RUST_VERSION}" --profile minimal \
|
|
--component rustfmt --component clippy \
|
|
&& chmod -R a+rwX "$RUSTUP_HOME" "$CARGO_HOME"
|
|
|
|
WORKDIR /work
|