-
Notifications
You must be signed in to change notification settings - Fork 286
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Co-authored-by: chengwenxi <[email protected]> Co-authored-by: nghuyenthevinh2000 <[email protected]>
- Loading branch information
1 parent
cf0f545
commit 5cdad50
Showing
3 changed files
with
203 additions
and
33 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,56 @@ | ||
name: Release | ||
|
||
on: | ||
push: | ||
tags: | ||
- 'v[0-9]+.[0-9]+.[0-9]+' # Push events to matching v*, i.e. v1.0, v20.15.10 | ||
- 'v[0-9]+.[0-9]+.[0-9]+-rc*' # Push events to matching v*, i.e. v1.0-rc1, v20.15.10-rc5 | ||
|
||
jobs: | ||
release: | ||
env: | ||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
if: startsWith(github.ref, 'refs/tags/') | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Create release for ${{github.ref_name}} | ||
run: gh release create ${{github.ref_name}} --prerelease --generate-notes --repo ${{github.repository}} | ||
|
||
artifacts: | ||
if: startsWith(github.ref, 'refs/tags/') | ||
needs: release | ||
runs-on: ubuntu-latest | ||
env: | ||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
strategy: | ||
matrix: | ||
build_type: ['build-release-arm64', 'build-release-amd64'] | ||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v3 | ||
- name: Set version tag | ||
run: echo "VERSION=$(echo ${{github.ref_name}} | sed 's/^v//')" >> $GITHUB_ENV | ||
- name: Build ${{matrix.build_type}} | ||
run: make ${{matrix.build_type}} | ||
- name: Upload the artifacts to release | ||
run: gh release upload ${{github.ref_name}} ./build/release/* | ||
|
||
calculate-checksums: | ||
needs: artifacts | ||
env: | ||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
if: startsWith(github.ref, 'refs/tags/') | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Create build directory | ||
run: mkdir -p build/release | ||
- name: Download artifacts | ||
run: gh release download ${{github.ref_name}} --pattern '*.tar.gz' --dir build/release --repo ${{github.repository}} | ||
- name: Create checksums | ||
run: | | ||
cd build/release | ||
sha256sum *.tar.gz > checksum.txt | ||
- name: Display checksums | ||
run: cat build/release/checksum.txt | ||
- name: Upload the checksum to release | ||
run: gh release upload ${{github.ref_name}} build/release/checksum.txt --repo ${{github.repository}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,54 +1,123 @@ | ||
# docker build . -t cosmwasm/wasmd:latest | ||
# docker run --rm -it cosmwasm/wasmd:latest /bin/sh | ||
FROM golang:1.18-alpine3.17 AS go-builder | ||
ARG source=. | ||
# syntax=docker/dockerfile:1 | ||
|
||
# this comes from standard alpine nightly file | ||
# https://github.com/rust-lang/docker-rust-nightly/blob/master/alpine3.12/Dockerfile | ||
# with some changes to support our toolchain, etc | ||
RUN set -eux; apk add --no-cache ca-certificates build-base; | ||
ARG GO_VERSION="1.18" | ||
ARG ALPINE_VERSION="3.17" | ||
ARG BUILDPLATFORM=linux/amd64 | ||
ARG BASE_IMAGE="golang:${GO_VERSION}-alpine${ALPINE_VERSION}" | ||
FROM --platform=${BUILDPLATFORM} ${BASE_IMAGE} as base | ||
|
||
RUN apk add git cmake | ||
# NOTE: add these to run with LEDGER_ENABLED=true | ||
# RUN apk add libusb-dev linux-headers | ||
############################################################################### | ||
# Builder | ||
############################################################################### | ||
|
||
WORKDIR /code | ||
COPY ${source} /code/ | ||
FROM base as builder-stage-1 | ||
|
||
# Install mimalloc | ||
RUN git clone -b v2.0.0 --depth 1 https://github.com/microsoft/mimalloc; cd mimalloc; mkdir build; cd build; cmake ..; make -j$(nproc); make install | ||
ENV MIMALLOC_RESERVE_HUGE_OS_PAGES=4 | ||
ARG GIT_COMMIT | ||
ARG GIT_VERSION | ||
ARG BUILDPLATFORM | ||
ARG GOOS=linux \ | ||
GOARCH=amd64 | ||
|
||
# Cosmwasm - download correct libwasmvm version and verify checksum | ||
RUN WASMVM_VERSION=$(go list -m github.com/CosmWasm/wasmvm | cut -d ' ' -f 2) \ | ||
&& wget https://github.com/CosmWasm/wasmvm/releases/download/$WASMVM_VERSION/libwasmvm_muslc.$(uname -m).a \ | ||
-O /lib/libwasmvm_muslc.a \ | ||
&& wget https://github.com/CosmWasm/wasmvm/releases/download/$WASMVM_VERSION/checksums.txt -O /tmp/checksums.txt \ | ||
&& sha256sum /lib/libwasmvm_muslc.a | grep $(cat /tmp/checksums.txt | grep $(uname -m) | cut -d ' ' -f 1) | ||
ENV GOOS=$GOOS \ | ||
GOARCH=$GOARCH | ||
|
||
# force it to use static lib (from above) not standard libgo_cosmwasm.so file | ||
RUN LEDGER_ENABLED=false BUILD_TAGS=muslc LDFLAGS="-linkmode=external -extldflags \"-L/code/mimalloc/build -lmimalloc -Wl,-z,muldefs -static\"" make build | ||
# NOTE: add libusb-dev to run with LEDGER_ENABLED=true | ||
RUN set -eux &&\ | ||
apk update &&\ | ||
apk add --no-cache \ | ||
ca-certificates \ | ||
linux-headers \ | ||
build-base \ | ||
cmake \ | ||
git | ||
|
||
FROM alpine:3.17 | ||
# install mimalloc for musl | ||
WORKDIR ${GOPATH}/src/mimalloc | ||
RUN set -eux &&\ | ||
git clone --depth 1 --branch v2.0.9 \ | ||
https://github.com/microsoft/mimalloc . &&\ | ||
mkdir -p build &&\ | ||
cd build &&\ | ||
cmake .. &&\ | ||
make -j$(nproc) &&\ | ||
make install | ||
|
||
RUN apk add wget lz4 aria2 curl jq gawk coreutils "zlib>1.2.12-r2" "libssl1.1>1.1.1q-r0" && apk update | ||
# download dependencies to cache as layer | ||
WORKDIR ${GOPATH}/src/app | ||
COPY go.mod go.sum ./ | ||
RUN --mount=type=cache,target=/root/.cache/go-build \ | ||
--mount=type=cache,target=/root/go/pkg/mod \ | ||
go mod download -x | ||
|
||
RUN addgroup terra \ | ||
&& adduser -G terra -D -h /terra terra | ||
# Cosmwasm - Download correct libwasmvm version and verify checksum | ||
RUN set -eux &&\ | ||
WASMVM_VERSION=$(go list -m github.com/CosmWasm/wasmvm | cut -d ' ' -f 2) && \ | ||
WASMVM_DOWNLOADS="https://github.com/CosmWasm/wasmvm/releases/download/${WASMVM_VERSION}"; \ | ||
wget ${WASMVM_DOWNLOADS}/checksums.txt -O /tmp/checksums.txt; \ | ||
if [ ${BUILDPLATFORM} = "linux/amd64" ]; then \ | ||
WASMVM_URL="${WASMVM_DOWNLOADS}/libwasmvm_muslc.x86_64.a"; \ | ||
elif [ ${BUILDPLATFORM} = "linux/arm64" ]; then \ | ||
WASMVM_URL="${WASMVM_DOWNLOADS}/libwasmvm_muslc.aarch64.a"; \ | ||
else \ | ||
echo "Unsupported Build Platfrom ${BUILDPLATFORM}"; \ | ||
exit 1; \ | ||
fi; \ | ||
wget ${WASMVM_URL} -O /lib/libwasmvm_muslc.a; \ | ||
CHECKSUM=`sha256sum /lib/libwasmvm_muslc.a | cut -d" " -f1`; \ | ||
grep ${CHECKSUM} /tmp/checksums.txt; \ | ||
rm /tmp/checksums.txt | ||
|
||
WORKDIR /terra | ||
############################################################################### | ||
|
||
COPY --from=go-builder /code/build/terrad /usr/local/bin/terrad | ||
FROM builder-stage-1 as builder-stage-2 | ||
|
||
USER terra | ||
ARG GOOS=linux \ | ||
GOARCH=amd64 | ||
|
||
ENV GOOS=$GOOS \ | ||
GOARCH=$GOARCH | ||
|
||
# Copy the remaining files | ||
COPY . . | ||
|
||
# Build app binary | ||
RUN --mount=type=cache,target=/root/.cache/go-build \ | ||
--mount=type=cache,target=/root/go/pkg/mod \ | ||
go install \ | ||
-mod=readonly \ | ||
-tags "netgo,muslc" \ | ||
-ldflags " \ | ||
-w -s -linkmode=external -extldflags \ | ||
'-L/go/src/mimalloc/build -lmimalloc -Wl,-z,muldefs -static' \ | ||
-X github.com/cosmos/cosmos-sdk/version.Name='terra' \ | ||
-X github.com/cosmos/cosmos-sdk/version.AppName='terrad' \ | ||
-X github.com/cosmos/cosmos-sdk/version.Version=${GIT_VERSION} \ | ||
-X github.com/cosmos/cosmos-sdk/version.Commit=${GIT_COMMIT} \ | ||
-X github.com/cosmos/cosmos-sdk/version.BuildTags='netgo,muslc' \ | ||
" \ | ||
-trimpath \ | ||
./... | ||
|
||
################################################################################ | ||
|
||
FROM alpine:${ALPINE_VERSION} as terra-core | ||
|
||
RUN apk update && apk add wget lz4 aria2 curl jq gawk coreutils "zlib>1.2.12-r2" "libssl1.1>1.1.1q-r0" | ||
|
||
COPY --from=builder-stage-2 /go/bin/terrad /usr/local/bin/terrad | ||
|
||
RUN addgroup -g 1000 terra && \ | ||
adduser -u 1000 -G terra -D -h /app terra | ||
|
||
# rest server | ||
EXPOSE 1317 | ||
# grpc | ||
# grpc server | ||
EXPOSE 9090 | ||
# tendermint p2p | ||
EXPOSE 26656 | ||
# tendermint rpc | ||
EXPOSE 26657 | ||
|
||
CMD ["/usr/local/bin/terrad", "version"] | ||
WORKDIR /app | ||
|
||
CMD ["terrad", "version"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters