Switch to gcc. Container images only on release.

Author: Ananth Bhaskararaman

.github/workflows/ci.yaml

@@ -11,7 +11,6 @@ on:
 
 env:
   GO_VERSION: 1.19
-  ZIG_VERSION: 0.10.0
 
 jobs:
   lint:
@@ -41,30 +40,25 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: ${{ env.GO_VERSION }}
-      - name: Setup zig
-        uses: goto-bus-stop/setup-zig@v2
-        with:
-          version: ${{ env.ZIG_VERSION }}
       - name: Build binary
         run: |
-          env CGO_ENABLED=1 \
-            CC="zig cc -target x86_64-linux-musl" \
-            CXX="zig c++ -target x86_64-linux-musl" \
-            go build
+          mkdir build
+          go build -o build ./...
       - name: Upload binary
         uses: actions/upload-artifact@v3
         with:
           name: bifrost
-          path: bifrost
+          path: build/**
       - name: Update Github release
         if: startsWith(github.ref, 'refs/tags/')
         uses: softprops/action-gh-release@v1
         with:
           append_body: true
           generate_release_notes: true
-          files: bifrost
+          files: build/**
 
   images:
+    if: startsWith(github.ref, 'refs/tags/')
     name: Build and push images to ghcr.io
     runs-on: ubuntu-latest
     concurrency:
@@ -78,25 +72,45 @@ jobs:
       - name: Set environment variables
         run: |
           echo "SHORT_SHA=$(echo $GITHUB_SHA | cut -c1-8)" >>"$GITHUB_ENV"
-      - name: Build image
+      - name: Build bouncer image
         uses: redhat-actions/buildah-build@v2
-        id: build_image
+        id: build_bouncer_image
         with:
           image: ${{ github.repository }}
-          build-args: |
-            GO_VERSION=${{ env.GO_VERSION }}
-            ZIG_VERSION=${{ env.ZIG_VERSION }}
+          build-args: GO_VERSION=${{ env.GO_VERSION }}
+          extra-args: --target=bouncer
           tags: >
             latest
             ${{ env.SHORT_SHA }}
             ${{ github.sha }}
             ${{ github.event.release.tag_name }}
           containerfiles: Dockerfile
-      - name: Push image
+      - name: Build issuer image
+        uses: redhat-actions/buildah-build@v2
+        id: build_issuer_image
+        with:
+          image: ${{ github.repository }}
+          build-args: GO_VERSION=${{ env.GO_VERSION }}
+          extra-args: --target=issuer
+          tags: >
+            latest
+            ${{ env.SHORT_SHA }}
+            ${{ github.sha }}
+            ${{ github.event.release.tag_name }}
+          containerfiles: Dockerfile
+      - name: Push bouncer image
+        uses: redhat-actions/push-to-registry@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+          image: ${{ steps.build_bouncer_image.outputs.image }}
+          tags: ${{ steps.build_bouncer_image.outputs.tags }}
+      - name: Push issuer image
         uses: redhat-actions/push-to-registry@v2
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
-          image: ${{ steps.build_image.outputs.image }}
-          tags: ${{ steps.build_image.outputs.tags }}
+          image: ${{ steps.build_issuer_image.outputs.image }}
+          tags: ${{ steps.build_issuer_image.outputs.tags }}

Dockerfile

@@ -1,21 +1,12 @@
 ARG GO_VERSION="1.19"
 
 FROM docker.io/library/golang:${GO_VERSION}-alpine as builder
-ARG ZIG_VERSION="0.10.0"
-RUN apk add --quiet --no-cache --update \
-  build-base git
-RUN wget -qO- https://ziglang.org/download/${ZIG_VERSION}/zig-linux-x86_64-${ZIG_VERSION}.tar.xz \
-  | unxz | tar x -C /usr/local/bin --strip-components 1 \
-  zig-linux-x86_64-${ZIG_VERSION}/zig \
-  zig-linux-x86_64-${ZIG_VERSION}/lib
+RUN apk add --quiet --no-cache --update git
 WORKDIR /src
 COPY . .
 ENV GOPRIVATE="github.com/RealImage/*"
 RUN mkdir /build
-RUN env CGO_ENABLED=1 \
-  CC="zig cc -target x86_64-linux-musl" \
-  CXX="zig c++ -target x86_64-linux-musl" \
-  go build -o /build ./...
+RUN go build -o /build ./...
 
 FROM gcr.io/distroless/static as bouncer
 COPY --from=builder /build/bouncer /