ci: fix Docker build - upload binary as artifact, use COPY instead of curl from draft release

Author: Algorithm5838

.github/workflows/build-artifacts.yaml

@@ -56,6 +56,13 @@ jobs:
       - name: Package release
         run: tar czf redlib-aarch64-unknown-linux-musl.tar.gz -C target/aarch64-unknown-linux-musl/release/ redlib
 
+      - name: Upload binary as workflow artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: redlib-aarch64-unknown-linux-musl
+          path: target/aarch64-unknown-linux-musl/release/redlib
+          retention-days: 1
+
       - name: Upload release
         uses: softprops/action-gh-release@v2
         with:

.github/workflows/main-docker.yml

@@ -18,13 +18,24 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Download binary artifact from Release Build
+        uses: actions/download-artifact@v4
+        with:
+          name: redlib-aarch64-unknown-linux-musl
+          path: docker-bin/
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Make binary executable
+        run: chmod +x docker-bin/redlib
+
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY_IMAGE }}
           tags: |
-            type=sha
+            type=sha,prefix=sha-,format=short,event=branch
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Set up Docker Buildx
@@ -45,15 +56,12 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          file: Dockerfile
-          build-args: |
-            TARGET=aarch64-unknown-linux-musl
-            GITHUB_REPOSITORY=${{ github.repository }}
+          file: Dockerfile.prebuilt
 
-      - name: Print image tag
+      - name: Print image tags
         run: |
           echo "## Docker Image" >> $GITHUB_STEP_SUMMARY
           echo '```' >> $GITHUB_STEP_SUMMARY
           echo "docker pull ${{ env.REGISTRY_IMAGE }}:latest" >> $GITHUB_STEP_SUMMARY
-          echo "docker pull ${{ env.REGISTRY_IMAGE }}:sha-$(echo '${{ github.sha }}' | cut -c1-7)" >> $GITHUB_STEP_SUMMARY
+          echo "docker pull ${{ env.REGISTRY_IMAGE }}:sha-$(echo '${{ github.event.workflow_run.head_sha }}' | cut -c1-7)" >> $GITHUB_STEP_SUMMARY
           echo '```' >> $GITHUB_STEP_SUMMARY

Dockerfile.prebuilt

@@ -0,0 +1,15 @@
+FROM alpine:3.19
+
+# Binary is copied from the workflow artifact (docker-bin/redlib)
+COPY docker-bin/redlib /usr/local/bin/redlib
+
+RUN adduser --home /nonexistent --no-create-home --disabled-password redlib
+USER redlib
+
+# Tell Docker to expose port 8080
+EXPOSE 8080
+
+# Run a healthcheck every minute to make sure redlib is functional
+HEALTHCHECK --interval=1m --timeout=3s CMD wget --spider -q http://localhost:8080/settings || exit 1
+
+CMD ["redlib"]