ci: add docker build to CI.

Author: zicklag

.github/workflows/docker-build-and-publish.yaml

@@ -0,0 +1,82 @@
+name: Build & Publish Docker Image
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+permissions:
+  packages: write
+
+env:
+  RELEASE_VERSION: ${{ github.ref_name }}
+
+jobs:
+  build-and-publish:
+    name: Build and Publish Docker Image
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          # list of Docker images to use as base name for tags
+          images: |
+            ghcr.io/${{ github.repository_owner }}/semantic-search-api
+
+          # generate Docker tags based on the following events/attributes
+          tags: |
+            type=schedule
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Cache
+        uses: actions/cache@v3
+        id: cache
+        with:
+          path: |
+            target
+            registry
+            git
+          key: cache-${{ hashFiles('Dockerfile') }}
+
+      # Might be helpful later, but isn't working right now
+      # - name: Inject Container Build Cache
+      #   uses: reproducible-containers/[email protected]
+      #   with:
+      #     cache-map: |
+      #       {
+      #         "registry": "/usr/local/cargo/registry/cache",
+      #         "idnex": "/usr/local/cargo/registry/index",
+      #         "git": "/usr/local/cargo/git/db",
+      #         "target": "/usr/src/embed-server/target"
+      #       }
+      #     skip-extraction: ${{ steps.cache.outputs.cache-hit }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          file: Dockerfile
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

Dockerfile

@@ -1,7 +1,6 @@
 FROM rust:1.87 as build
 
 # Add certificate and uncomment if building behind proxy with custom cert
-COPY ./gitignore/ca-certificates.crt /etc/ssl/cert.pem
 # COPY ./gitignore/ca-certificates.crt /usr/local/share/ca-certificates/ca.crt
 # RUN update-ca-certificates
 
@@ -14,6 +13,7 @@ RUN --mount=type=cache,target=/project/model \
     cp -r model /model
 ENV ORT_LIB_LOCATION=/project/ort/onnxruntime/lib
 RUN --mount=type=cache,target=/project/target \
+    --mount=type=cache,target=/project/ort \
     --mount=type=cache,target=/usr/local/cargo/registry \
     --mount=type=cache,target=/usr/local/cargo/git \
     cargo b --release && \

download-deps.sh

@@ -15,7 +15,7 @@ fi
 popd
 
 # Download ORT
-if [ ! -d "ort" ]; then
+if [ ! -d "ort/onnxruntime" ]; then
     mkdir -p ort
     pushd ort
     wget https://cdn.pyke.io/0/pyke:ort-rs/[email protected]/x86_64-unknown-linux-gnu.tgz -O ort.tgz