WIP

Author: jplock

.github/workflows/docker-bake.yml

@@ -0,0 +1,33 @@
+name: enclave bake
+
+on:
+  push:
+    branches:
+      - main
+      - jp-more-tweaks
+  pull_request:
+    branches:
+      - main
+      - jp-more-tweaks
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}
+  cancel-in-progress: true
+
+env:
+  RUST_BACKTRACE: 1
+  CARGO_TERM_COLOR: never
+
+jobs:
+  docker:
+    # if: github.repository_owner == 'aws-samples'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Set up Docker buildx
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
+      - name: Build
+        uses: docker/bake-action@3fc70e1131fee40a422dd8dd0ff22014ae20a1f3 # v5.11.0
+        env:
+          SOURCE_DATE_EPOCH: 0

.github/workflows/rust.yml

@@ -1,4 +1,4 @@
-name: Rust
+name: rust tests
 
 on:
   push:
@@ -14,15 +14,17 @@ concurrency:
 
 env:
   RUST_BACKTRACE: 1
-  CARGO_TERM_COLOR: always
+  CARGO_TERM_COLOR: never
 
 jobs:
   test:
     if: github.repository_owner == 'aws-samples'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Cache
+        uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5
       - name: Format
         run: cargo fmt --all -- --check --verbose
       - name: Build

docker-bake.hcl

@@ -0,0 +1,21 @@
+group "default" {
+    targets = ["parent", "enclave"]
+}
+
+target "parent" {
+    context = "./parent"
+    dockerfile = "Dockerfile"
+    args = {
+        TARGETPLATFORM = "x86_64-unknown-linux-gnu"
+    }
+    tags = ["parent-vault:latest"]
+}
+
+target "enclave" {
+    context = "./enclave"
+    dockerfile = "Dockerfile"
+    args = {
+        TARGETPLATFORM = "x86_64-unknown-linux-musl"
+    }
+    tags = ["enclave-vault:latest"]
+}