fix(ci): copy shared build scripts before docker build

The CI workflows use docker/build-push-action directly (not
build-image.sh), so shared scripts must be copied into each
service's shared/ directory before building.

Also update REUSE.toml for the renamed kms pinned-packages file,
and remove the obsolete .GIT_REV file creation from kms workflows
(now handled via Dockerfile ARG).

Author: kvinwang

.github/workflows/docker-build-check.yml

@@ -19,8 +19,10 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Write GIT_REV
-        run: git rev-parse HEAD > kms/dstack-app/builder/.GIT_REV
+      - name: Copy shared build scripts
+        run: |
+          cp build/shared/pin-packages.sh kms/dstack-app/builder/shared/
+          cp build/shared/config-qemu.sh kms/dstack-app/builder/shared/
 
       - name: Build KMS Docker image
         uses: docker/build-push-action@v5
@@ -47,6 +49,9 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Copy shared build scripts
+        run: cp build/shared/pin-packages.sh gateway/dstack-app/builder/shared/
+
       - name: Build Gateway Docker image
         uses: docker/build-push-action@v5
         with:
@@ -65,6 +70,11 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Copy shared build scripts
+        run: |
+          cp build/shared/pin-packages.sh verifier/builder/shared/
+          cp build/shared/config-qemu.sh verifier/builder/shared/
+
       - name: Build Verifier Docker image
         uses: docker/build-push-action@v5
         with:

.github/workflows/gateway-release.yml

@@ -38,6 +38,9 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Copy shared build scripts
+        run: cp build/shared/pin-packages.sh gateway/dstack-app/builder/shared/
+
       - name: Get Git commit timestamps
         run: |
           echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV

.github/workflows/kms-release.yml

@@ -38,8 +38,10 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Write GIT_REV
-        run: git rev-parse HEAD > kms/dstack-app/builder/.GIT_REV
+      - name: Copy shared build scripts
+        run: |
+          cp build/shared/pin-packages.sh kms/dstack-app/builder/shared/
+          cp build/shared/config-qemu.sh kms/dstack-app/builder/shared/
 
       - name: Get Git commit timestamps
         run: |

.github/workflows/verifier-release.yml

@@ -37,6 +37,11 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Copy shared build scripts
+        run: |
+          cp build/shared/pin-packages.sh verifier/builder/shared/
+          cp build/shared/config-qemu.sh verifier/builder/shared/
+
       - name: Get Git commit timestamps
         run: |
           echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV

REUSE.toml

@@ -32,7 +32,7 @@ path = [
     "sdk/simulator/*.json",
     "sdk/go/go.sum",
     "sdk/go/ratls/go.sum",
-    "kms/dstack-app/builder/shared/kms-pinned-packages.txt",
+    "kms/dstack-app/builder/shared/builder-pinned-packages.txt",
     "kms/dstack-app/builder/shared/qemu-pinned-packages.txt",
     "gateway/dstack-app/builder/shared/builder-pinned-packages.txt",
     "gateway/dstack-app/builder/shared/pinned-packages.txt",