[#] Build docker image using nix instead of github action

.github/workflows/build_nix.yml

@@ -10,6 +10,20 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - name: Building package
-      run: nix build -v -L
-    - name: Build docker
-      run: nix bundle --bundler 'github:NixOS/bundlers#toDockerImage' .
+      run: nix build '.#main'
+    - name: Build docker image
+      run: |
+        nix build '.#docker'
+        ls -lah $(readlink ./result)
+        docker load -i ./result
+    - name: Login to Container registry
+      uses: docker/login-action@v3
+      with:
+        registry: ${{ env.REGISTRY }}
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    - name: Retag and push
+      if: github.repository == 'nextdotid/relation_server'
+      run: |
+        docker tag nextdotid/relation_server:latest ghcr.io/${{ github.repository }}:${{ github.ref_name }}
+        docker push ghcr.io/${{ github.repository }}:${{ github.ref_name }}

docker-compose.yaml

@@ -1,6 +1,11 @@
 # For developemnt use only.
-version: "3.8"
 services:
+  relation:
+    image: nextdotid/relation_server:latest
+    ports:
+      - 127.0.0.1:8000:8000
+    volumes:
+    - ./config:/app/config:ro
   tigergraph:
     image: tigergraph/tigergraph:3.9.1
     ports:

flake.nix

@@ -10,16 +10,51 @@
       let
         pkgs = import nixpkgs { inherit system; };
         naersk-lib = pkgs.callPackage naersk { };
-        buildInputs = with pkgs; [ openssl pkg-config ];
-        nativeBuildInputs = with pkgs; [ cargo rustc rustfmt rust-analyzer pre-commit rustPackages.clippy ];
-      in
-      {
-        defaultPackage = naersk-lib.buildPackage {
-          inherit buildInputs;
+        buildInputs = with pkgs; [ openssl cacert curl ];
+        nativeBuildInputs = with pkgs; [ pkg-config cargo rustc rustfmt rustPackages.clippy ];
+        rustPackage = naersk-lib.buildPackage {
+          inherit buildInputs nativeBuildInputs;
+          # China registry mirror
+          cratesDownloadUrl = "https://crates-io.proxy.ustclug.org";
           src = ./.;
         };
+        dockerImage = pkgs.dockerTools.buildLayeredImage {
+          name = "nextdotid/relation_server";
+          tag = "latest";
+          created = "now";
+          contents = [ rustPackage pkgs.curl pkgs.cacert ];
+          config = {
+            Workingdir = "/app";
+            Cmd = [ "standalone" ];
+            ExposedPorts = {
+              "8000/tcp" = {};
+            };
+            Volumes = {
+              "/app/config" = {};
+            };
+            Test = [ "CMD" "curl" "-s" "http://127.0.0.1:8000/" ];
+            Interval = 30000000000; # 30s
+            Timeout =  10000000000; # 10s
+            Retries = 3;
+            Labels = {
+              "maintainer" = "Nyk Ma <[email protected]>";
+              "org.opencontainers.image.description" = "RelationService: relation aggregation.";
+              "org.opencontainers.image.source" = "https://github.com/NextDotID/relation_server";
+              "org.opencontainers.image.title" = "relation_server";
+              "org.opencontainers.image.url" = "https://github.com/NextDotID/relation_server";
+            };
+          };
+        };
+      in {
+        packages = {
+          main = rustPackage;
+          docker = dockerImage;
+        };
+        defaultPackage = rustPackage;
         devShell = with pkgs; mkShell {
-          buildInputs = buildInputs ++ nativeBuildInputs;
+          buildInputs = buildInputs ++
+                        nativeBuildInputs ++
+                        (with pkgs; [ act rust-analyzer pre-commit ]);
           RUST_SRC_PATH = rustPlatform.rustLibSrc;
         };
       });

justfile

@@ -35,3 +35,9 @@ clean:
 # npm install -g get-graphql-schema
 get-schema:
     get-graphql-schema https://api-v2.lens.dev/playground > src/upstream/lensv2/schema.graphql
+
+# Build docker image using nix:
+build-docker:
+  nix build '.#docker'
+  docker load -i ./result
+  echo 'Image: nextdotid/relation_server:latest'