Add multi-arch build/publish CI and build deps for arm64

Author: Harrylevesque

.github/workflows/docker-publish.yml

@@ -0,0 +1,44 @@
+name: Build and publish multi-arch image
+
+on:
+  push:
+    branches:
+      - main
+      - master
+      - keypairs
+  workflow_dispatch: {}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          registry: docker.io
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ${{ secrets.DOCKERHUB_USERNAME }}/samfpy-client:latest
+            ${{ secrets.DOCKERHUB_USERNAME }}/samfpy-client:${{ github.sha }}
+          file: Dockerfile
+          context: .
+

Dockerfile

@@ -1,16 +1,30 @@
 FROM python:3.13-slim
 
+# Install runtime helper (xdg-utils) and temporary build tools so pip can
+# compile any packages that require native extensions (PyNaCl, kyber-py, etc.).
 RUN apt-get update && apt-get install -y --no-install-recommends \
         xdg-utils \
+        build-essential \
+        gcc \
+        g++ \
+        libffi-dev \
+        libsodium-dev \
+        libssl-dev \
+        pkg-config \
+        cargo \
+        python3-dev \
     && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 
 COPY requirements.txt /app/requirements.txt
 
+# Create virtualenv and install Python deps while build deps are present.
 RUN python -m venv /app/.venv \
-    && /app/.venv/bin/pip install --upgrade pip \
-    && /app/.venv/bin/pip install -r /app/requirements.txt
+    && /app/.venv/bin/pip install --upgrade pip setuptools wheel \
+    && /app/.venv/bin/pip install -r /app/requirements.txt \
+    && apt-get purge -y --auto-remove build-essential gcc g++ cargo python3-dev pkg-config libffi-dev libsodium-dev libssl-dev \
+    && rm -rf /var/lib/apt/lists/*
 
 COPY . /app
 

README.md

@@ -0,0 +1,23 @@
+SAMFpy Client
+
+This repository contains a TUI client and helper scripts.
+
+# Docker multi-arch publishing
+
+To publish a multi-arch image (linux/amd64 & linux/arm64) to Docker Hub via GitHub Actions:
+
+1. Create Docker Hub repo: docker.io/<your-username>/samfpy-client
+2. Add GitHub repository secrets:
+   - DOCKERHUB_USERNAME
+   - DOCKERHUB_TOKEN
+3. Push to branch `main`, `master`, or `keypairs` to trigger the workflow. You can also run it manually via "Actions" -> "Build and publish multi-arch image" -> "Run workflow".
+
+Or build locally with buildx:
+
+```bash
+docker buildx create --use --bootstrap
+docker buildx build --platform linux/amd64,linux/arm64 -t USERNAME/samfpy-client:latest --push .
+```
+
+If pip fails for arm64 due to missing wheels, ensure the Dockerfile includes the necessary system build dependencies (this repo already adds a conservative set: gcc, g++, libffi-dev, libsodium-dev, cargo, python3-dev).
+