split signet miner from node image

Author: 1ma

.github/workflows/build.yml

@@ -32,7 +32,7 @@ jobs:
       RUNNER: ${{ matrix.runner }}
       VERSION: ${{ matrix.knots.version }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: docker/setup-buildx-action@v3
       - uses: docker/login-action@v3
         with:
@@ -97,3 +97,23 @@ jobs:
           package-type: container
           delete-only-untagged-versions: true
           min-versions-to-keep: 0
+
+  miner:
+    name: Build signet miner image from latest Knots version
+    runs-on: ubuntu-latest
+    needs:
+      - merge
+    steps:
+      - uses: actions/checkout@v6
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          username: 1maa
+          password: ${{ secrets.DOCKER_HUB_PASS }}
+      - uses: docker/bake-action@v6
+        with:
+          provenance: false
+          push: true
+          sbom: false
+          targets: miner

README.md

@@ -28,6 +28,8 @@ services:
 
 ## Available Versions
 
+* `1maa/bitcoin:latest`
+* `1maa/bitcoin:signet-miner`
 * `1maa/bitcoin:v29.2.knots20251110`
 * `1maa/bitcoin:v29.2.knots20251010`
 * `1maa/bitcoin:v29.1.knots20250903`
@@ -45,6 +47,6 @@ For a step-by-step guide to do a deterministic build of Bitcoin Knots and attest
 
 ## Signet Miner
 
-This image includes the sources of the CPU signet miner from `contrib/signet`.
+The image variant `1maa/bitcoin:signet-miner` contains the `contrib/signet` CPU miner for signet networks.
 
-For an example on how to use this image in signet mining mode refer to the `miner` service in the compose.yml file of the [signet-playground](https://github.com/BcnBitcoinOnly/signet-playground/blob/master/compose.yml) repository.
+For an example on how to use this image refer to the `miner` service in the compose.yml file of the [signet-playground](https://github.com/BcnBitcoinOnly/signet-playground/blob/master/compose.yml) repository.

autotools/Dockerfile

@@ -82,16 +82,12 @@ FROM alpine:3.22 AS final
 ARG KNOTS_VERSION
 
 COPY --from=builder /usr/local/bin/* /usr/local/bin/
-COPY --from=builder /tmp/bitcoin-${KNOTS_VERSION}/test/functional/test_framework /opt/bitcoin/test/functional/test_framework
-COPY --from=builder /tmp/bitcoin-${KNOTS_VERSION}/contrib/signet/miner           /opt/bitcoin/contrib/signet/miner
 
 RUN apk add --no-cache \
-    python3 \
     tor \
  && adduser -D bitcoin \
  && mkdir /home/bitcoin/.bitcoin \
- && chown bitcoin:bitcoin /home/bitcoin/.bitcoin \
- && ln -s /opt/bitcoin/contrib/signet/miner /usr/local/bin/miner
+ && chown bitcoin:bitcoin /home/bitcoin/.bitcoin
 
 USER bitcoin
 

cmake/Dockerfile

@@ -62,16 +62,12 @@ FROM alpine:3.22 AS final
 ARG KNOTS_VERSION
 
 COPY --from=builder /usr/local/bin/* /usr/local/bin/
-COPY --from=builder /tmp/bitcoin-${KNOTS_VERSION}/test/functional/test_framework /opt/bitcoin/test/functional/test_framework
-COPY --from=builder /tmp/bitcoin-${KNOTS_VERSION}/contrib/signet/miner           /opt/bitcoin/contrib/signet/miner
 
 RUN apk add --no-cache \
-    python3 \
     tor \
  && adduser -D bitcoin \
  && mkdir /home/bitcoin/.bitcoin \
- && chown bitcoin:bitcoin /home/bitcoin/.bitcoin \
- && ln -s /opt/bitcoin/contrib/signet/miner /usr/local/bin/miner
+ && chown bitcoin:bitcoin /home/bitcoin/.bitcoin
 
 USER bitcoin
 

docker-bake.hcl

@@ -36,7 +36,7 @@ variable "VERSION" {
 }
 
 group "default" {
-  targets = ["knots"]
+  targets = ["knots", "miner"]
 }
 
 target "knots" {
@@ -51,3 +51,17 @@ target "knots" {
   }]
   tags = ["ghcr.io/bcnbitcoinonly/bitcoin:v${VERSION}-${RUNNER}"]
 }
+
+target "miner" {
+  args = {
+    KNOTS_VERSION = "29.2.knots20251110"
+  }
+  context = "miner"
+  cache-to = [{type = "inline"}]
+  cache-from = [{
+    type = "registry"
+    ref = "1maa/bitcoin:signet-miner"
+  }]
+  platforms = ["linux/amd64", "linux/arm64"]
+  tags = ["1maa/bitcoin:signet-miner"]
+}

miner/Dockerfile

@@ -0,0 +1,47 @@
+FROM alpine:3.23 AS verifier
+
+ARG KNOTS_VERSION
+
+WORKDIR /tmp
+
+RUN KNOTS_MAJOR_VERSION=$(echo ${KNOTS_VERSION} | cut -c1-2) \
+ && wget https://bitcoinknots.org/files/${KNOTS_MAJOR_VERSION}.x/${KNOTS_VERSION}/SHA256SUMS \
+ && wget https://bitcoinknots.org/files/${KNOTS_MAJOR_VERSION}.x/${KNOTS_VERSION}/SHA256SUMS.asc \
+ && wget https://bitcoinknots.org/files/${KNOTS_MAJOR_VERSION}.x/${KNOTS_VERSION}/bitcoin-${KNOTS_VERSION}.tar.gz
+
+RUN apk add --no-cache \
+    coreutils \
+    curl \
+    gnupg \
+    jq \
+ && curl -s https://api.github.com/repos/bitcoinknots/guix.sigs/contents/builder-keys | jq -r '.[].download_url' | while read url; do curl -s "$url" | gpg --import; done \
+ && gpg --verify SHA256SUMS.asc SHA256SUMS \
+ && sha256sum --ignore-missing -c SHA256SUMS
+
+RUN tar zxf bitcoin-${KNOTS_VERSION}.tar.gz \
+ && mv bitcoin-${KNOTS_VERSION} bitcoin
+
+
+FROM alpine:3.23 AS final
+
+ENV CLI_CMD=bitcoin-cli
+ENV MINING_XPUB=tr(tpubXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/0/*)#xxxxxxxx
+
+COPY --from=1maa/bitcoin:latest /usr/local/bin/bitcoin-cli  /usr/local/bin/bitcoin-cli
+COPY --from=1maa/bitcoin:latest /usr/local/bin/bitcoin-util /usr/local/bin/bitcoin-util
+
+COPY --from=verifier /tmp/bitcoin/test/functional/test_framework /usr/local/src/bitcoin/test/functional/test_framework
+COPY --from=verifier /tmp/bitcoin/contrib/signet/miner           /usr/local/src/bitcoin/contrib/signet/miner
+
+COPY --chown=0:0 --chmod=755 entrypoint.sh /opt/entrypoint.sh
+
+RUN apk add --no-cache \
+    python3 \
+ && adduser -D bitcoin \
+ && ln -s /usr/local/src/bitcoin/contrib/signet/miner /usr/local/bin/miner
+
+USER bitcoin
+
+STOPSIGNAL SIGINT
+
+ENTRYPOINT ["/opt/entrypoint.sh"]

miner/entrypoint.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+exec /usr/local/bin/miner \
+  --cli="${CLI_CMD}" \
+  generate \
+  --descriptor "${MINING_XPUB}" \
+  --grind-cmd="bitcoin-util grind" \
+  --min-nbits \
+  --ongoing