sneak
32b468af8a
check / check (push) Failing after 1s
A bare `docker build .` keyed `make fmt-check-go`, `make lint`, the prettier check, and `make test` on the build context, so on an unchanged tree every check layer was a cache hit: the build exited 0 in under a second having run none of them. Add `ARG CHECK_EPOCH` immediately above the first check RUN in all three check stages (lint, mdfmt, builder), and have script/cibuild pass a fresh `--build-arg CHECK_EPOCH` each run. The changing value busts the cache from that point down, while `go mod download` and `yarn install` above it stay cached, so the build does not regress to cold. The false claim in script/cibuild's header comment is corrected. Running the checks for real surfaces the pre-existing intermittent internal/cli test timeout (the gpg-subprocess flake in #62 / #67); that defect is out of scope here. Model: opus-4-8
68 lines
2.1 KiB
Docker
68 lines
2.1 KiB
Docker
# Lint stage — fast feedback on formatting and lint issues
|
|
# golangci/golangci-lint:v2.12.2 (Debian-based), 2026-08-07
|
|
FROM golangci/golangci-lint:v2.12.2@sha256:5cceeef04e53efe1470638d4b4b4f5ceefd574955ab3941b2d9a68a8c9ad5240 AS lint
|
|
|
|
WORKDIR /src
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
|
|
# Touch .pb.go so make does not try to regenerate via protoc (file is committed)
|
|
RUN touch mfer/mf.pb.go
|
|
|
|
# Changing value from script/cibuild; forces the check steps below to
|
|
# re-run instead of being served from a stale layer cache.
|
|
ARG CHECK_EPOCH
|
|
|
|
# Go half of fmt-check only: this image has no node, so no prettier. The
|
|
# markdown half runs in the mdfmt stage below.
|
|
RUN make fmt-check-go
|
|
RUN make lint
|
|
|
|
# Markdown/JSON format stage — prettier needs node, which the Go images
|
|
# do not have. node:22.17.0-bookworm-slim (2026-08-09); ships node
|
|
# 22.17.0 and yarn 1.22.22, the versions script/bootstrap pins.
|
|
FROM node@sha256:b04ce4ae4e95b522112c2e5c52f781471a5cbc3b594527bcddedee9bc48c03a0 AS mdfmt
|
|
|
|
WORKDIR /src
|
|
COPY package.json yarn.lock ./
|
|
RUN yarn install --frozen-lockfile
|
|
|
|
COPY . .
|
|
|
|
# Changing value from script/cibuild; forces the check step below to
|
|
# re-run instead of being served from a stale layer cache.
|
|
ARG CHECK_EPOCH
|
|
|
|
# No make in this image; call the script entrypoint directly.
|
|
RUN script/prettier --check
|
|
|
|
# Build stage — tests and compilation
|
|
# golang:1.23 (2026-03-14)
|
|
FROM golang@sha256:60deed95d3888cc5e4d9ff8a10c54e5edc008c6ae3fba6187be6fb592e19e8c0 AS builder
|
|
|
|
# Force BuildKit to run the lint and mdfmt stages by creating stage dependencies
|
|
COPY --from=lint /src/go.sum /dev/null
|
|
COPY --from=mdfmt /src/go.sum /dev/null
|
|
|
|
WORKDIR /src
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
|
|
# Touch .pb.go so make does not try to regenerate via protoc (file is committed)
|
|
RUN touch mfer/mf.pb.go
|
|
|
|
# Changing value from script/cibuild; forces the check steps below to
|
|
# re-run instead of being served from a stale layer cache.
|
|
ARG CHECK_EPOCH
|
|
|
|
RUN make test
|
|
RUN cd cmd/mfer && go build -tags urfave_cli_no_docs -o /mfer .
|
|
|
|
FROM scratch
|
|
COPY --from=builder /mfer /mfer
|
|
ENTRYPOINT ["/mfer"]
|