Merge pull request #80 from frnandu/chore/rust-dockerfile

Add rust Dockerfile

Author: tnull

rust/.dockerignore

@@ -0,0 +1 @@
+target/

rust/Cargo.lock

@@ -0,0 +1,48 @@
+# Build stage
+FROM rust:1.91-bookworm AS builder
+
+WORKDIR /build
+
+# Copy workspace files
+COPY Cargo.toml Cargo.lock ./
+COPY rustfmt.toml ./
+
+# Copy all workspace members
+COPY server ./server
+COPY api ./api
+COPY impls ./impls
+COPY auth-impls ./auth-impls
+
+# Build the application in release mode
+RUN cargo build --locked --release --bin vss-server
+
+# Runtime stage
+FROM debian:bookworm-slim
+
+# Install runtime dependencies and create an unprivileged runtime user
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+    ca-certificates \
+    libssl3 \
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd --system vss \
+    && useradd --system --gid vss --home-dir /app --shell /usr/sbin/nologin vss \
+    && mkdir -p /app \
+    && chown vss:vss /app
+
+WORKDIR /app
+
+# Copy the compiled binary from builder
+COPY --from=builder --chown=vss:vss /build/target/release/vss-server /app/vss-server
+
+# Copy default configuration file
+COPY --chown=vss:vss server/vss-server-config.toml /app/vss-server-config.toml
+
+USER vss:vss
+
+ENV VSS_BIND_ADDRESS=0.0.0.0:8080
+
+EXPOSE 8080
+
+# Run the server with the config file
+CMD ["/app/vss-server", "/app/vss-server-config.toml"]

rust/Dockerfile

@@ -12,7 +12,7 @@ sigs = [ "bitcoin_hashes", "hex-conservative", "secp256k1" ]
 api = { path = "../api" }
 async-trait = "0.1.77"
 base64 = { version = "0.22.1", optional = true, default-features = false, features = ["std"] }
-bitcoin_hashes = { version = "0.19", optional = true, default-features = false }
+bitcoin_hashes = { version = "1.0", optional = true, default-features = false }
 hex-conservative = { version = "1.0", optional = true, default-features = false }
 openssl = { version = "0.10.75", optional = true, default-features = false }
 secp256k1 = { version = "0.31", optional = true, default-features = false, features = [ "global-context" ] }

rust/auth-impls/Cargo.toml

@@ -1,4 +1,19 @@
 services:
+  vss-server:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    ports:
+      - "8080:8080"
+    environment:
+      VSS_BIND_ADDRESS: 0.0.0.0:8080
+      VSS_PSQL_ADDRESS: postgres:5432
+    depends_on:
+      postgres:
+        condition: service_healthy
+    networks:
+      - app-network
+
   postgres:
     image: postgres:15
     environment:
@@ -9,6 +24,11 @@ services:
       - postgres-data:/var/lib/postgresql/data
     ports:
       - "5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
     networks:
       - app-network