Skip to content

Build docker images in CI#842

Merged
fdupress merged 1 commit intomainfrom
docker-builds-in-ci
Feb 5, 2026
Merged

Build docker images in CI#842
fdupress merged 1 commit intomainfrom
docker-builds-in-ci

Conversation

@fdupress
Copy link
Member

@fdupress fdupress commented Nov 28, 2025

This adds a pipeline to generate base, build and formosa containers in CI for release branches (tagged by the release tag). This captures the software environment at the time of release and should help ensure we have stable-ish artefacts going forward.

@fdupress fdupress requested a review from strub November 28, 2025 16:47
@fdupress fdupress self-assigned this Nov 28, 2025
@fdupress fdupress force-pushed the docker-builds-in-ci branch from fe424ef to a6bb879 Compare November 28, 2025 17:02
@fdupress fdupress force-pushed the docker-builds-in-ci branch 2 times, most recently from 14847f6 to 7d980bd Compare December 2, 2025 11:52
@fdupress
Copy link
Member Author

fdupress commented Dec 2, 2025

Right—putting this one on pause. It is silly to run this as a matrix when the base is build in all 3 jobs, but can't be shared. I need to rethink this—including whether we want to publish the base and build images.

On the plus side, the build is working.

@fdupress fdupress marked this pull request as draft December 2, 2025 12:01
@fdupress fdupress force-pushed the docker-builds-in-ci branch 2 times, most recently from 66611b8 to b219d50 Compare January 23, 2026 16:18
@fdupress
Copy link
Member Author

Notes to self on debugging the pipeline.

All images got built.

base-box got pushed successfully (and is in the container repository), but the push for build-box failed despite successful authentication.

The failure happened shortly after 15 minutes. I may need to split the job, add dependencies between jobs, and make sure we cache as much of the work as possible.

@fdupress fdupress force-pushed the docker-builds-in-ci branch 3 times, most recently from 2bdf33f to a09a5b2 Compare January 30, 2026 16:30
@fdupress
Copy link
Member Author

Note to self on debugging: https://ghcr.info/easycrypt/ needs to be accessed from a browser to give this repo permission to administer container images from CI. You learn something new every day.

@fdupress fdupress marked this pull request as ready for review January 30, 2026 18:59
@fdupress fdupress force-pushed the docker-builds-in-ci branch from a09a5b2 to d3dfa31 Compare January 30, 2026 18:59
@fdupress
Copy link
Member Author

Reviewers, I am interested in opinions on using latest or stable or release or something else as the name of the branch that follows the latest release.

Currently, it's latest. Publishing container images tagged for that branch (which is useful in setting up the CI of maintained proofs to follow the release cycle) will then overwrite the latest tag. This feels fine to me, but I'd like external thoughts.

Other than this decision: this is ready to go minus the REVERT ME. Container repository pollution will be cleaned up afterwards.

This does not produce images with a full EasyCrypt or Formosa setup. (No test box, and no formosa-test box, the configuration for which does not even exist.)

@fdupress fdupress changed the title Prepare for docker builds in CI Build docker images in CI Feb 4, 2026
@fdupress fdupress force-pushed the docker-builds-in-ci branch from d3dfa31 to db89dad Compare February 5, 2026 21:36
We now build `base`, `build` and `formosa` containers in CI, and push
them to GHCR. This is done for the `main` and `release` branches, as
well as for tagged releases (`ryyyy.mm`). Containers are tagged with the
originating branch or tag when pushed.

This ensures that the software environment for building EasyCrypt (and
Jasmin, in the `formosa` container) is captured at time of release.
@strub strub force-pushed the docker-builds-in-ci branch from db89dad to 15507a9 Compare February 5, 2026 22:06
@fdupress fdupress enabled auto-merge (rebase) February 5, 2026 22:29
@fdupress fdupress merged commit 9557f1d into main Feb 5, 2026
17 checks passed
@fdupress fdupress deleted the docker-builds-in-ci branch February 5, 2026 22:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants