Try to use a Dockerfile to make the musl builds

Author: giarc3

.github/workflows/typescript-napi-ci.yaml

@@ -15,8 +15,8 @@ jobs:
       matrix:
         rust_version:
           - stable
-        # Uncomment after Rust 1.90.0 comes out: https://github.com/rust-lang/rust/issues/145699
-        #   - beta
+          - beta
+        # These should match those in the `docker-test` job
         node_version:
           - 20
           - 22
@@ -55,33 +55,15 @@ jobs:
       - name: Run tests
         run: yarn run test
 
-  test-docker:
-    runs-on: ${{ matrix.os }}
-    container:
-      image: node:${{ matrix.node_version }}-alpine
+  # Used to create musl binaries
+  docker-test:
+    runs-on: ${{ matrix.system.os }}
     strategy:
       matrix:
-        rust_version:
-          - stable
-          - beta
-        node_version:
-          - 20
-          - 22
-          - 24
-        os:
-          - ubuntu-24.04
-          - ubuntu-24.04-arm
+        system:
+          - os: [ubuntu-24.04, ubuntu-24.04-arm]
       fail-fast: false
     steps:
-      - run: apk add build-base git python3 wget
-      - run: echo RUSTFLAGS="-C target-feature=-crt-static" >> "${GITHUB_ENV}"
       - uses: actions/checkout@v5
-      - uses: IronCoreLabs/rust-toolchain@v1
-        with:
-          toolchain: ${{ matrix.rust_version }}
-      - name: Install modules
-        run: yarn install --ignore-scripts
-      - name: Compile
-        run: yarn run compile
-      - name: Run tests
-        run: yarn run test
+      # These Node versions should match those above in the `test` job.
+      - run: for NODE_VERSION in 20 22 24; do docker build --build-arg NODE_VERSION=$NODE_VERSION .; done

.gitignore

@@ -8,6 +8,7 @@ target
 artifacts.json
 dist/*
 bin-package/*
+host-artifacts/*
 build/*
 .idea/*
 .direnv

Dockerfile

@@ -0,0 +1,19 @@
+# This Dockerfile produces a musl binary for recrypt-node-binding.
+# It can be built with this command to copy the result out into ./host-artifacts/out
+# docker build --build-arg NODE_VERSION=24 --output type=local,dest=./host-artifacts .
+
+ARG NODE_VERSION=24
+FROM node:${NODE_VERSION}-alpine3.22 AS build
+
+RUN apk add --no-cache \
+    build-base \
+    rust \
+    cargo
+COPY . /app
+WORKDIR /app
+RUN yarn install
+RUN node publish.js
+
+FROM scratch AS artifacts
+WORKDIR /out
+COPY --from=build /app/bin-package ./

package.json

@@ -30,7 +30,7 @@
         "test": "jest --maxWorkers=50%"
     },
     "dependencies": {
-        "@mapbox/node-pre-gyp": "^1.0.7"
+        "@mapbox/node-pre-gyp": "^2.0.0"
     },
     "devDependencies": {
         "@types/node": "^16.11.11",

publish.js

@@ -11,7 +11,7 @@
  * + Compile rust code into index.node file.
  * + Run unit tests to ensure the library is in good shape for publishing.
  * + Move all expected content into a `dist` directory.
- * + Generate a binary distrubtion in `bin-package`.
+ * + Generate a binary distribution in `bin-package`.
  * + Do a dry run of npm publishing via irish-pub or perform an actual publish step if `--publish` option is provided.
  */
 
@@ -63,7 +63,7 @@ var tgz = shell.exec("find ./build -name *.tar.gz");
 shell.cp(tgz, "./bin-package/");
 shell.pushd("./dist");
 
-var publishCmd = "echo 'Skipping publishing to npm...'"
+var publishCmd = "echo 'Skipping publishing to npm...'";
 if (shouldPublish) {
     publishCmd = "npm publish --access public";
     // If we're publishing a branch build or prerelease like "1.2.3-pre.4", use "--tag next".