Add Docker support and CI workflow for Docker image publish

.dockerignore

@@ -0,0 +1,26 @@
+.git/
+build/
+cmake-build-*/
+bin/
+out/
+.cache/
+**/.DS_Store
+
+# IDE
+.idea/
+.vs/
+*.user
+*.suo
+
+# CI
+.github/
+
+# Scripts (pas nécessaires au build Docker ici)
+scripts/
+
+# Docs (garde README si tu veux)
+*.md
+!README.md
+
+# Docker files (garde ce dont tu as besoin)
+docker-compose*.yml

.github/workflows/docker.yml

@@ -0,0 +1,65 @@
+name: Docker Build
+
+on:
+  push:
+    branches:
+      - 'develop'
+      - 'minor'
+    tags:
+      - 'v*'
+  pull_request:
+
+env:
+  REGISTRY: ghcr.io
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            platform: linux/amd64
+            runner: ubuntu-latest
+          - arch: arm64
+            platform: linux/arm64
+            runner: ubuntu-24.04-arm
+
+    runs-on: ${{ matrix.runner }}
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Set image name
+        run: echo "IMAGE_NAME=${GITHUB_REPOSITORY@L}" >> $GITHUB_ENV
+
+      - uses: docker/setup-buildx-action@v3
+
+      - uses: docker/login-action@v3
+        if: github.event_name != 'pull_request'
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: docker/metadata-action@v5
+        id: meta
+        with:
+          images: ghcr.io/${{ env.IMAGE_NAME }}
+
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: ${{ matrix.platform }}
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=registry,ref=ghcr.io/${{ env.IMAGE_NAME }}:buildcache-${{ matrix.arch }}
+          cache-to: type=registry,ref=ghcr.io/${{ env.IMAGE_NAME }}:buildcache-${{ matrix.arch }},mode=max
+          provenance: false
+          sbom: false

.gitignore

@@ -478,3 +478,6 @@ callgrind.*
 notes/*
 compile_commands.json
 nohup.out
+
+
+build/

Dockerfile

@@ -0,0 +1,92 @@
+FROM debian:12-slim AS builder
+
+ARG VCPKG_COMMIT=5bf0c55239da398b8c6f450818c9e28d36bf9966
+ARG BUILD_PARALLEL=2
+ARG ENABLE_LTO=ON
+
+ENV DEBIAN_FRONTEND=noninteractive \
+    CMAKE_BUILD_TYPE=Release \
+    VCPKG_FORCE_SYSTEM_BINARIES=1 \
+    VCPKG_FEATURE_FLAGS=manifests
+
+WORKDIR /work
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    apt-get update && apt-get install -y --no-install-recommends \
+      ca-certificates \
+      curl \
+      zip unzip tar \
+      git \
+      cmake \
+      ninja-build \
+      build-essential \
+      pkg-config \
+      liblua5.3-0 liblua5.3-dev \
+      binutils \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN git clone https://github.com/microsoft/vcpkg /work/vcpkg && \
+    cd /work/vcpkg && \
+    git checkout ${VCPKG_COMMIT} && \
+    ./bootstrap-vcpkg.sh -disableMetrics
+
+ENV VCPKG_ROOT=/work/vcpkg
+
+COPY vcpkg.json ./
+COPY deps/ ./deps/
+COPY cmake/ ./cmake/
+COPY CMakeLists.txt ./
+COPY include/ ./include/
+COPY src/ ./src/
+COPY test/ ./test/
+
+RUN --mount=type=cache,target=/root/.cache/vcpkg,sharing=locked \
+    --mount=type=cache,target=/work/vcpkg/downloads,sharing=locked \
+    --mount=type=cache,target=/work/vcpkg/buildtrees,sharing=locked \
+    --mount=type=cache,target=/work/vcpkg/packages,sharing=locked \
+    --mount=type=cache,target=/work/build-server,sharing=locked \
+    mkdir -p /work/out && \
+    cmake -S /work -B /work/build-server -G Ninja \
+      -DCMAKE_TOOLCHAIN_FILE=/work/vcpkg/scripts/buildsystems/vcpkg.cmake \
+      -DCMAKE_BUILD_TYPE=Release \
+      -DCMAKE_CXX_FLAGS="-O3 -g -Wl,-z,norelro -Wl,--hash-style=gnu -Wl,-z,noseparate-code -ffunction-sections -fdata-sections -Wl,--gc-sections" \
+      -DBeamMP-Server_ENABLE_LTO=${ENABLE_LTO} \
+    && cmake --build /work/build-server --parallel ${BUILD_PARALLEL} -t BeamMP-Server \
+    && objcopy --only-keep-debug /work/build-server/BeamMP-Server /work/build-server/BeamMP-Server.debug \
+    && strip --strip-unneeded /work/build-server/BeamMP-Server \
+    && objcopy --add-gnu-debuglink=/work/build-server/BeamMP-Server.debug /work/build-server/BeamMP-Server \
+    && install -m 0755 /work/build-server/BeamMP-Server /work/out/BeamMP-Server
+
+RUN --mount=type=cache,target=/root/.cache/vcpkg,sharing=locked \
+    --mount=type=cache,target=/work/vcpkg/downloads,sharing=locked \
+    --mount=type=cache,target=/work/vcpkg/buildtrees,sharing=locked \
+    --mount=type=cache,target=/work/vcpkg/packages,sharing=locked \
+    --mount=type=cache,target=/work/build-tests,sharing=locked \
+    cmake -S /work -B /work/build-tests -G Ninja \
+      -DCMAKE_TOOLCHAIN_FILE=/work/vcpkg/scripts/buildsystems/vcpkg.cmake \
+      -DCMAKE_BUILD_TYPE=Release \
+      -DBeamMP-Server_ENABLE_LTO=OFF \
+    && cmake --build /work/build-tests --parallel 1 -t BeamMP-Server-tests
+
+FROM debian:12-slim AS runtime
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    liblua5.3-0 \
+    curl \
+    ca-certificates \
+  && rm -rf /var/lib/apt/lists/*
+
+RUN useradd -m -u 1000 beammp && \
+    mkdir -p /app /app/data /config /resources && \
+    chown -R beammp:beammp /app /config /resources
+
+# /work/build-server is a BuildKit cache mount (not persisted in layers), so copy from /work/out.
+COPY --from=builder /work/out/BeamMP-Server /app/BeamMP-Server
+
+WORKDIR /app
+USER beammp
+
+EXPOSE 30814
+ENTRYPOINT ["/app/BeamMP-Server"]
+CMD ["--config=/config/ServerConfig.toml", "--working-directory=/app"]

cmake/Git.cmake

@@ -1,21 +1,38 @@
-find_package(Git)
+find_package(Git QUIET)
+
+# Only try to update submodules if:
+# - the option is enabled
+# - git is available
+# - we are in a real git checkout (".git" exists)
 if(${PROJECT_NAME}_CHECKOUT_GIT_SUBMODULES)
     if(Git_FOUND)
-        message(STATUS "Git found, submodule update and init")
-        execute_process(COMMAND ${GIT_EXECUTABLE} submodule update --init
-                        WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}
-                        RESULT_VARIABLE GIT_SUBMOD_RESULT)
-        if(NOT GIT_SUBMOD_RESULT EQUAL "0")
-            message(SEND_ERROR "git submodule update --init --recursive failed with ${GIT_SUBMOD_RESULT}, please checkout submodules. This may result in missing dependencies.")
+        if(EXISTS "${CMAKE_CURRENT_SOURCE_DIR}/.git")
+            message(STATUS "Git found, submodule update and init")
+            execute_process(
+                COMMAND "${GIT_EXECUTABLE}" submodule update --init --recursive
+                WORKING_DIRECTORY "${CMAKE_CURRENT_SOURCE_DIR}"
+                RESULT_VARIABLE GIT_SUBMOD_RESULT
+            )
+            if(NOT GIT_SUBMOD_RESULT EQUAL 0)
+                message(SEND_ERROR
+                    "git submodule update --init --recursive failed with ${GIT_SUBMOD_RESULT}, please checkout submodules. "
+                    "This may result in missing dependencies."
+                )
+            endif()
+        else()
+            message(STATUS "No .git directory found - skipping submodule update (assume submodules are already present).")
         endif()
     else()
-        message(SEND_ERROR "git required for checking out submodules, but not found. Submodules will not be checked out - this may result in missing dependencies.")
+        message(SEND_ERROR
+            "git required for checking out submodules, but not found. Submodules will not be checked out - "
+            "this may result in missing dependencies."
+        )
     endif()
 endif()
 
-if(Git_FOUND)
-
+if(Git_FOUND AND EXISTS "${CMAKE_CURRENT_SOURCE_DIR}/.git")
+    # If you compute PRJ_GIT_HASH somewhere else, keep that logic there.
 else()
-    message(STATUS "Git not found - the version will not include a git hash.")
+    message(STATUS "Git not found (or not a git checkout) - the version will not include a git hash.")
     set(PRJ_GIT_HASH "unknown")
-endif()
+endif()

compose.yaml

@@ -0,0 +1,21 @@
+services:
+  beammp-server:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: ghcr.io/BeamMP/beammp-server
+    container_name: beammp-server
+    restart: unless-stopped
+    ports:
+      - "30814:30814/tcp"
+      - "30814:30814/udp"
+    volumes:
+      # Mount configuration directory
+      - ./config:/config
+      # Mount resources directory (mods, plugins, etc.)
+      - ./resources:/resources:ro
+      # Mount working directory for logs and data
+      - ./data:/app/data
+    environment:
+      - TZ=UTC
+