CLDSRV-732: Fix flakiness starting cloudserver

The CI fails to wait for S3 after 40s recently

s3-stderr has those logs:
```
npm error code E403
npm error 403 403 Forbidden - GET https://registry.npmjs.org/nyc
npm error 403 In most cases, you or one of your dependencies are requesting
npm error 403 a package version that is forbidden by your security policy, or
npm error 403 on a server you do not have access to.
npm error A complete log of this run can be found in: /root/.npm/_logs/2025-08-26T12_00_55_746Z-debug-0.log
```

Build another image to include nyc and a command for coverage during tests

Author: BourgoisMickael

.github/docker/docker-compose.yaml

@@ -1,21 +1,6 @@
 services:
   cloudserver:
-    image: ${CLOUDSERVER_IMAGE}
-    command: |
-      bash -c "
-        # Using tini to handle signals properly
-        tini -s -g -- npx nyc --clean --silent yarn start > /artifacts/s3.log 2> /artifacts/s3-stderr.log &
-        PID=$$!
-        generate_coverage() {
-          echo 'Stopping NodeJS processes...'
-          kill -TERM $$PID 2>/dev/null || true
-          wait $$PID
-          echo 'Generating coverage report...'
-          npx nyc report --report-dir /coverage/test --reporter=lcov --reporter=text-summary
-        }
-        trap generate_coverage SIGTERM
-        wait $$PID
-      "
+    image: ${CLOUDSERVER_IMAGE}-testcoverage
     network_mode: "host"
     volumes:
       - /tmp/ssl:/ssl

.github/workflows/tests.yaml

@@ -178,6 +178,7 @@ jobs:
         with:
           push: true
           context: .
+          target: production
           provenance: false
           tags: |
             ghcr.io/${{ github.repository }}:${{ github.sha }}
@@ -187,6 +188,21 @@ jobs:
           cache-from: type=gha,scope=cloudserver
           cache-to: type=gha,mode=max,scope=cloudserver
 
+      - name: Build and push cloudserver image test coverage
+        uses: docker/build-push-action@v5
+        with:
+          push: true
+          context: .
+          target: testcoverage
+          provenance: false
+          tags: |
+            ghcr.io/${{ github.repository }}:${{ github.sha }}-testcoverage
+          labels: |
+            git.repository=${{ github.repository }}
+            git.commit-sha=${{ github.sha }}
+          cache-from: type=gha,scope=cloudserver
+          cache-to: type=gha,mode=max,scope=cloudserver
+
       - name: Build and push federation image
         uses: docker/build-push-action@v5
         with:

Dockerfile

@@ -30,7 +30,7 @@ COPY package.json yarn.lock /usr/src/app/
 RUN yarn install --production --ignore-optional --frozen-lockfile --ignore-engines --network-concurrency 1
 
 ################################################################################
-FROM node:${NODE_VERSION}
+FROM node:${NODE_VERSION} AS production
 
 ENV NO_PROXY=localhost,127.0.0.1
 ENV no_proxy=localhost,127.0.0.1
@@ -55,3 +55,10 @@ VOLUME ["/usr/src/app/localData","/usr/src/app/localMetadata"]
 ENTRYPOINT ["tini", "-g", "--", "/usr/src/app/docker-entrypoint.sh"]
 
 CMD [ "yarn", "start" ]
+
+################################################################################
+FROM production AS testcoverage
+
+RUN yarn add nyc
+
+CMD [ "./docker-test-with-coverage.sh" ]

docker-test-with-coverage.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+yarn nyc --clean --silent yarn start > /artifacts/s3.log 2> /artifacts/s3-stderr.log &
+
+PID=$!
+
+generate_coverage() {
+    echo 'Stopping NodeJS processes...'
+    kill -TERM $PID 2>/dev/null || true
+    wait $PID
+    echo 'Generating coverage report...'
+    yarn nyc report --report-dir /coverage/test --reporter=lcov --reporter=text-summary
+}
+
+trap generate_coverage SIGTERM
+wait $PID