build: harden linux runtime compatibility

Author: pallyoung

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ concurrency:
 jobs:
   version-consistency:
     name: Version Consistency
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
@@ -35,7 +35,7 @@ jobs:
       fail-fast: false
       matrix:
         os:
-          - ubuntu-latest
+          - ubuntu-22.04
           - macos-latest
           - windows-latest
     steps:
@@ -50,29 +50,28 @@ jobs:
 
   verify-linux:
     name: Verify Linux Runtime
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs: version-consistency
     env:
       CODER_STUDIO_START_TIMEOUT_MS: 45000
+      CODER_STUDIO_RUST_TARGET: x86_64-unknown-linux-musl
     steps:
       - uses: actions/checkout@v4
-      - name: Install Linux runtime dependencies
+      - name: Install Linux build dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y \
             build-essential \
             curl \
             file \
-            libayatana-appindicator3-dev \
-            libssl-dev \
-            libwebkit2gtk-4.1-dev \
-            librsvg2-dev \
-            patchelf \
+            musl-tools \
             xvfb \
             wget
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
+      - name: Install Linux musl target
+        run: rustup target add x86_64-unknown-linux-musl
       - uses: Swatinem/rust-cache@v2
         with:
           workspaces: apps/server -> .build/server/target

.github/workflows/release.yml

@@ -16,7 +16,7 @@ concurrency:
 jobs:
   preflight:
     name: Release Preflight
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
         with:
@@ -41,7 +41,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: ubuntu-latest
+          - os: ubuntu-22.04
             package_slug: coder-studio-linux-x64
           - os: macos-latest
             package_slug: coder-studio-darwin-arm64
@@ -52,20 +52,19 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - if: startsWith(matrix.os, 'ubuntu')
-        name: Install Linux runtime dependencies
+        name: Install Linux build dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y \
             build-essential \
             curl \
             file \
-            libayatana-appindicator3-dev \
-            libssl-dev \
-            libwebkit2gtk-4.1-dev \
-            librsvg2-dev \
-            patchelf \
+            musl-tools \
             wget
       - uses: dtolnay/rust-toolchain@stable
+      - if: startsWith(matrix.os, 'ubuntu')
+        name: Install Linux musl target
+        run: rustup target add x86_64-unknown-linux-musl
       - uses: Swatinem/rust-cache@v2
         with:
           workspaces: apps/server -> .build/server/target
@@ -75,6 +74,9 @@ jobs:
           node-version: 22
           cache: pnpm
           registry-url: 'https://registry.npmjs.org'
+      - if: startsWith(matrix.os, 'ubuntu')
+        name: Use Linux musl release target
+        run: echo "CODER_STUDIO_RUST_TARGET=x86_64-unknown-linux-musl" >> "$GITHUB_ENV"
       - run: pnpm install --no-frozen-lockfile
       - run: pnpm release:check
       - run: 'node -e "require(''fs'').mkdirSync(''.artifacts'', { recursive: true })"'
@@ -94,28 +96,32 @@ jobs:
     needs:
       - preflight
       - publish-platform
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
-      - name: Install Linux runtime dependencies
+      - name: Install Linux build dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y \
             build-essential \
             curl \
             file \
-            libayatana-appindicator3-dev \
-            libssl-dev \
-            libwebkit2gtk-4.1-dev \
-            librsvg2-dev \
-            patchelf \
+            musl-tools \
             wget
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Install Linux musl target
+        run: rustup target add x86_64-unknown-linux-musl
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: apps/server -> .build/server/target
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
           node-version: 22
           cache: pnpm
           registry-url: 'https://registry.npmjs.org'
+      - name: Use Linux musl release target
+        run: echo "CODER_STUDIO_RUST_TARGET=x86_64-unknown-linux-musl" >> "$GITHUB_ENV"
       - run: pnpm install --no-frozen-lockfile
       - run: pnpm release:check
       - run: 'node -e "require(''fs'').mkdirSync(''.artifacts'', { recursive: true })"'
@@ -135,7 +141,7 @@ jobs:
     needs:
       - publish-platform
       - publish-main
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4

package.json

@@ -11,7 +11,8 @@
     "dev:frontend": "vite",
     "build": "pnpm build:web",
     "build:web": "vite build",
-    "build:server": "cargo build --release --manifest-path apps/server/Cargo.toml",
+    "build:server": "node scripts/build/build-server.mjs",
+    "build:server:linux-musl": "node scripts/build/build-server.mjs --target x86_64-unknown-linux-musl",
     "build:runtime": "pnpm build:server",
     "build:cli": "node scripts/build/build-cli.mjs",
     "check:server": "cargo check --manifest-path apps/server/Cargo.toml",

scripts/build/build-packages.mjs

@@ -4,17 +4,17 @@ import {
   MAIN_PACKAGE,
   NPM_STAGE_ROOT,
   resolvePlatformPackageMeta,
-  SERVER_TARGET_DIR,
   WEB_DIST_DIR,
 } from '../lib/package-matrix.mjs';
+import { resolveServerBinaryPath } from '../lib/server-build.mjs';
 
 const packageMeta = resolvePlatformPackageMeta();
 if (!packageMeta) {
   throw new Error(`Unsupported platform for package assembly: ${process.platform}/${process.arch}`);
 }
 
 const binaryName = process.platform === 'win32' ? 'coder-studio.exe' : 'coder-studio';
-const binarySource = path.join(SERVER_TARGET_DIR, 'release', binaryName);
+const binarySource = resolveServerBinaryPath();
 const distSource = WEB_DIST_DIR;
 const packageRoot = packageMeta.stageDir;
 const binaryTarget = path.join(packageRoot, 'bin', binaryName);

scripts/build/build-server.mjs

@@ -0,0 +1,49 @@
+import { spawn } from 'node:child_process';
+import { ROOT } from '../lib/package-matrix.mjs';
+import {
+  buildServerCargoArgs,
+  resolveRustTarget,
+  resolveServerBinaryPath,
+} from '../lib/server-build.mjs';
+
+const cliArgs = process.argv.slice(2);
+const targetIndex = cliArgs.indexOf('--target');
+
+if (targetIndex !== -1) {
+  const target = cliArgs[targetIndex + 1];
+  if (!target) {
+    throw new Error('missing value for --target');
+  }
+  process.env.CODER_STUDIO_RUST_TARGET = target;
+  cliArgs.splice(targetIndex, 2);
+}
+
+if (cliArgs.length > 0) {
+  throw new Error(`unsupported arguments: ${cliArgs.join(' ')}`);
+}
+
+const cargoArgs = buildServerCargoArgs({ env: process.env });
+await new Promise((resolve, reject) => {
+  const child = spawn('cargo', cargoArgs, {
+    cwd: ROOT,
+    env: process.env,
+    stdio: 'inherit',
+  });
+
+  child.on('error', reject);
+  child.on('exit', (code, signal) => {
+    if (signal) {
+      reject(new Error(`cargo build terminated by signal ${signal}`));
+      return;
+    }
+    if (code === 0) {
+      resolve();
+      return;
+    }
+    reject(new Error(`cargo build failed with exit code ${code ?? 'unknown'}`));
+  });
+});
+
+const rustTarget = resolveRustTarget({ env: process.env });
+console.log(`built coder-studio server${rustTarget ? ` (${rustTarget})` : ''}`);
+console.log(`binary: ${resolveServerBinaryPath({ env: process.env })}`);

scripts/lib/server-build.mjs

@@ -0,0 +1,46 @@
+import path from 'node:path';
+import { ROOT, SERVER_APP_DIR, SERVER_TARGET_DIR } from './package-matrix.mjs';
+
+export function resolveRustTarget({ env = process.env } = {}) {
+  const value = env.CODER_STUDIO_RUST_TARGET;
+  if (typeof value !== 'string') return '';
+  return value.trim();
+}
+
+export function resolveServerBinaryName(platform = process.platform) {
+  return platform === 'win32' ? 'coder-studio.exe' : 'coder-studio';
+}
+
+export function resolveServerBinaryPath({
+  env = process.env,
+  platform = process.platform,
+  profile = 'release',
+} = {}) {
+  const binaryName = resolveServerBinaryName(platform);
+  const rustTarget = resolveRustTarget({ env });
+  if (rustTarget) {
+    return path.join(SERVER_TARGET_DIR, rustTarget, profile, binaryName);
+  }
+  return path.join(SERVER_TARGET_DIR, profile, binaryName);
+}
+
+export function buildServerCargoArgs({
+  env = process.env,
+  profile = 'release',
+  manifestPath = path.join(SERVER_APP_DIR, 'Cargo.toml'),
+} = {}) {
+  const args = ['build'];
+  if (profile === 'release') {
+    args.push('--release');
+  } else {
+    args.push('--profile', profile);
+  }
+  args.push('--manifest-path', path.relative(ROOT, manifestPath));
+
+  const rustTarget = resolveRustTarget({ env });
+  if (rustTarget) {
+    args.push('--target', rustTarget);
+  }
+
+  return args;
+}

scripts/test/start-release-server.mjs

@@ -2,10 +2,10 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { startRuntime, stopRuntime } from '../../.build/cli/lib/runtime-controller.mjs';
+import { resolveServerBinaryPath } from '../lib/server-build.mjs';
 
 const ROOT = fileURLToPath(new URL('../..', import.meta.url));
-const binaryName = process.platform === 'win32' ? 'coder-studio.exe' : 'coder-studio';
-const binaryPath = path.join(ROOT, '.build', 'server', 'target', 'release', binaryName);
+const binaryPath = resolveServerBinaryPath();
 const distDir = path.join(ROOT, '.build', 'web', 'dist');
 const stateDir = path.join(ROOT, '.tmp', 'release-e2e-runtime');
 const env = {

tests/release/release.test.mjs

@@ -4,6 +4,10 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { ROOT } from '../../scripts/lib/package-matrix.mjs';
+import {
+  buildServerCargoArgs,
+  resolveServerBinaryPath,
+} from '../../scripts/lib/server-build.mjs';
 import { assertReleaseAssets } from '../../scripts/release/check-assets.mjs';
 import { assertVersionConsistency, collectReleaseVersionState } from '../../scripts/release/check-version.mjs';
 import { createReleaseManifest } from '../../scripts/release/write-release-manifest.mjs';
@@ -21,6 +25,30 @@ test('release versions stay aligned across package manifests', async () => {
   assert.equal(state.mainVersion, state.cargoVersion);
 });
 
+test('server build helpers default to the native release output path', () => {
+  const env = {};
+  assert.equal(
+    resolveServerBinaryPath({ env, platform: 'linux' }),
+    path.join(ROOT, '.build', 'server', 'target', 'release', 'coder-studio'),
+  );
+  assert.deepEqual(
+    buildServerCargoArgs({ env }),
+    ['build', '--release', '--manifest-path', path.join('apps', 'server', 'Cargo.toml')],
+  );
+});
+
+test('server build helpers route Linux musl builds into the target-specific output path', () => {
+  const env = { CODER_STUDIO_RUST_TARGET: 'x86_64-unknown-linux-musl' };
+  assert.equal(
+    resolveServerBinaryPath({ env, platform: 'linux' }),
+    path.join(ROOT, '.build', 'server', 'target', 'x86_64-unknown-linux-musl', 'release', 'coder-studio'),
+  );
+  assert.deepEqual(
+    buildServerCargoArgs({ env }),
+    ['build', '--release', '--manifest-path', path.join('apps', 'server', 'Cargo.toml'), '--target', 'x86_64-unknown-linux-musl'],
+  );
+});
+
 test('release manifest writer emits checksums for tarballs', async () => {
   const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'coder-studio-release-'));