actions test

Author: rasmus-kirk

.github/workflows/release-reproducible-smart-contract.yaml

@@ -10,6 +10,7 @@ on:
 env:
   REGISTRY: docker.io
   SERVICE_NAME: 'verifiable-sc'
+  SOURCE_IMAGE_TAG: 'rust:1.85.0'
 
 jobs:
   build-and-push-image:
@@ -20,29 +21,54 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: recursive
-      # Uses the `docker/login-action` action to log in to the Container registry.
-      - name: Log in to the Container registry
-        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+      # - run: |
+      #     rustup update stable
+      #     rustup default stable
+      #     rustup target add wasm32-unknown-unknown
+      - name: Install Rust
+        uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          toolchain: 1.85.0
+          #target: wasm32-unknown-unknown
+      - name: Test smart contract
+        env:
+          TAG: ${{ github.ref_name }}
+        working-directory: ./concordium-base/smart-contracts/rust-contracts/example-contracts/fib
+        run: |
+          docker build -f "$GITHUB_WORKSPACE/reproducible/build.Dockerfile" --build-arg source_image="$SOURCE_IMAGE_TAG" -t local-image "$GITHUB_WORKSPACE/reproducible"
+          cargo run --manifest-path "$GITHUB_WORKSPACE/cargo-concordium/Cargo.toml"
+          # cargo run --manifest-path "$GITHUB_WORKSPACE/cargo-concordium/Cargo.toml" -- concordium build --verifiable "localhost/local-image:latest"
+          # cargo run --manifest-path "$GITHUB_WORKSPACE/cargo-concordium/Cargo.toml" -- concordium verify-build --module ./concordium-out/module.wasm.v1 --source ./concordium-out/module.wasm.v1.tar
       - name: Extract version from git tag
         id: meta
         env:
-            TAG: ${{ github.ref_name }}
+          TAG: ${{ github.ref_name }}
         run: |
-            SERVICE_TAG=${TAG##${{ env.SERVICE_NAME }}/}
-            if [ $SERVICE_TAG != ${{ env.SOURCE_IMAGE_TAG }} ]; then
-                echo "Tag version does not match the source image version."
-                exit 1
-            fi
-            echo "tag=${{ env.REGISTRY }}concordium/${{ env.SERVICE_NAME }}-${SERVICE_TAG}" >> $GITHUB_OUTPUT
-      - name: Build and push Docker image
-        uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
-        with:
-          context: .
-          file: ./reproducible/build.Dockerfile
-          push: true
-          platforms: linux/amd64
-          tags: ${{ steps.meta.outputs.tag }}
+          # Extract version by splitting on "/" and taking the second part
+          TAG_VERSION=$(echo "$TAG" | cut -d '/' -f2)
+          IMG_VERSION=$(echo "$SOURCE_IMAGE_TAG" | cut -d ':' -f2)
+
+          if [ $TAG_VERSION != $IMG_VERSION ]; then
+              echo "Tag version does not match the source image version."
+              exit 1
+          fi
+
+          # Save tag as fx "docker.io/concordium/verifiable-sc-1.85.0"
+          echo "tag=$REGISTRY/concordium/$SERVICE_NAME-$TAG_VERSION" >> $GITHUB_OUTPUT
+      # Uses the `docker/login-action` action to log in to the Container registry.
+      # - name: Log in to the Container registry
+      #   uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+      #   with:
+      #     registry: ${{ env.REGISTRY }}
+      #     username: ${{ secrets.DOCKERHUB_USERNAME }}
+      #     password: ${{ secrets.DOCKERHUB_TOKEN }}
+      # - name: Build and push Docker image
+      #   uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
+      #   with:
+      #     context: .
+      #     file: ./reproducible/build.Dockerfile
+      #     push: true
+      #     platforms: linux/amd64
+      #     tags: ${{ steps.meta.outputs.tag }}
+      #     build-args: |
+      #       source_image=${{ env.SOURCE_IMAGE_TAG }}

reproducible/build.Dockerfile

@@ -1,11 +1,12 @@
 # A builder for images for verifiable/reproducible builds.
-# The `source_image` is meant to be a published Rust image, such as rust:1.70.
+# The `source_image` is meant to be a published Rust image, such as rust:1.90.
 #
 # This image only adds a script `run-copy.sh` that is used by cargo-concordium
 # to copy data in and out of the container. The image also adds
 # wasm32-unknown-unknown target.
 
-FROM rust:1.85 AS build
+ARG source_image=rust:1.90.0
+FROM ${source_image} AS build
 
 RUN rustup target add wasm32-unknown-unknown