build: publishing binary and container with goreleaser (#247)

* build: publishing binary and container with goreleaser

* build: compile before make

* build: add go lint dependencies

Author: jimyag

.github/workflows/image.yaml

@@ -0,0 +1,37 @@
+name: goreleaser
+on:
+  # when you push a tag that matches v*, build binaries
+  push:
+    tags:
+      - v*
+
+permissions:
+  contents: write
+  packages: write
+  attestations: write
+  id-token: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Go
+        uses: actions/setup-go@v5
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          distribution: goreleaser
+          version: 'latest'
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -0,0 +1,60 @@
+env:
+  - GO111MODULE=on
+  - CGO_ENABLED=0
+
+metadata:
+  mod_timestamp: "{{ .CommitTimestamp }}"
+
+builds:
+  - env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    mod_timestamp: "{{ .CommitTimestamp }}"
+    flags:
+      - -trimpath
+    ldflags:
+      - -s -w -X github.com/qiniu/reviewbot/internal/version.version={{.Version}}
+dockers:
+  - image_templates:
+      [
+        "ghcr.io/qiniu/reviewbot:{{ .Version }}",
+        "ghcr.io/qiniu/reviewbot:latest",
+      ]
+    dockerfile: Dockerfile
+    use: buildx
+    build_flag_templates:
+      - "--pull"
+      - "--label=io.artifacthub.package.readme-url=https://raw.githubusercontent.com/qiniu/reviewbot/master/README.md"
+      - "--label=org.opencontainers.image.description=Comprehensive linters runner for code review"
+      - "--label=org.opencontainers.image.created={{.Date}}"
+      - "--label=org.opencontainers.image.name={{.ProjectName}}"
+      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
+      - "--label=org.opencontainers.image.version={{.Version}}"
+      - "--label=org.opencontainers.image.source={{.GitURL}}"
+      - "--platform=linux/amd64"
+  - image_templates:
+      [
+        "ghcr.io/qiniu/reviewbot:{{ .Version }}",
+        "ghcr.io/qiniu/reviewbot:latest",
+      ]
+    dockerfile: Dockerfile
+    use: buildx
+    build_flag_templates:
+      - "--pull"
+      - "--label=io.artifacthub.package.readme-url=https://raw.githubusercontent.com/qiniu/reviewbot/master/README.md"
+      - "--label=org.opencontainers.image.description=Comprehensive linters runner for code review"
+      - "--label=org.opencontainers.image.created={{.Date}}"
+      - "--label=org.opencontainers.image.name={{.ProjectName}}"
+      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
+      - "--label=org.opencontainers.image.version={{.Version}}"
+      - "--label=org.opencontainers.image.source={{.GitURL}}"
+      - "--platform=linux/arm64"
+    goarch: arm64
+archives:
+  - format: binary

.goreleaser.yaml

@@ -1,21 +1,13 @@
-FROM library/golang:1.22.4 as builder
-
-WORKDIR /app
-
-# keep this cache in a separate layer to speed up builds
-RUN GOPATH=/go go install -ldflags="-extldflags=-static" github.com/golangci/golangci-lint/cmd/golangci-lint@v1.59.1
-
-COPY . ./
-
-RUN CGO_ENABLED=0 GOOS=linux go build -v -trimpath -o /reviewbot .  
-
-FROM alpine:3.20 as runner
+# go lint tool dependencies `go list` `gofmt`
+FROM golang:alpine
 
 # if you want to install other tools, please add them here.
 # Do not install unnecessary tools to reduce image size.
 RUN set -eux  \
     apk update && \
-    apk --no-cache add ca-certificates luacheck cppcheck shellcheck git openssh yarn libpcap-dev curl build-base
+    apk --no-cache add ca-certificates luacheck cppcheck shellcheck git openssh yarn libpcap-dev curl build-base && \
+    curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b  /usr/local/bin v1.59.1
+
 WORKDIR /
 # check binary
 RUN cppcheck --version \
@@ -25,12 +17,11 @@ RUN cppcheck --version \
     && ssh -V \
     && yarn --version \
     && curl --version \
-    && gcc --version
+    && gcc --version \
+    && golangci-lint --version \
+    && go version
 
-COPY --from=builder /reviewbot /reviewbot
-COPY --from=builder /go/bin/golangci-lint /usr/local/bin/
-# golangci-lint dependencies
-COPY --from=builder /usr/local/go/ /usr/local/go/ 
+COPY reviewbot /reviewbot
 
 # SSH config
 RUN mkdir -p /root/.ssh && chown -R root /root/.ssh/ &&  chgrp -R root /root/.ssh/ \
@@ -39,8 +30,6 @@ RUN mkdir -p /root/.ssh && chown -R root /root/.ssh/ &&  chgrp -R root /root/.ss
 COPY deploy/config /root/.ssh/config
 COPY deploy/github-known-hosts /github_known_hosts
 
-ENV PATH="${PATH}:/usr/local/go/bin"
-
 EXPOSE 8888
 
 ENTRYPOINT [ "/reviewbot" ]

Dockerfile

@@ -35,11 +35,11 @@ staticcheck: check-staticcheck
 build: check-go
 	CGO_ENABLED=0 go build -v -trimpath -ldflags "$(LDFLAGS)" -o ./reviewbot .
 
-docker-build-latest: check-docker
-	docker builder build --push -t $(DOCKER_IMAGE):$(TAG) -t $(DOCKER_IMAGE):latest --target runner .
+docker-build-latest: check-docker build
+	docker builder build --push -t $(DOCKER_IMAGE):$(TAG) -t $(DOCKER_IMAGE):latest .
 
-docker-dev: check-docker
-	docker builder build -t $(DOCKER_IMAGE):$(TAG) --target runner .
+docker-dev: check-docker build
+	docker builder build -t $(DOCKER_IMAGE):$(TAG)  .
 
 kubernetes-deploy: check-kubectl
 	kubectl apply -k .