[CI] Release with Docker image

.dockerignore

@@ -0,0 +1,9 @@
+.git
+.github
+target
+**/.DS_Store
+integration/jam-conformance
+integration/jamtestvectors
+integration/jamtestvectors-polkajam
+integration/jamtestvectors-pvm
+Dockerfile

.github/workflows/release.yml

@@ -1,130 +1,71 @@
-name: Release Build
+name: Release
 
 on:
   push:
     branches:
       - release
+  workflow_dispatch:
 
 env:
   CARGO_TERM_COLOR: always
 
 permissions:
-  contents: write
+  contents: read
+  packages: write
 
 jobs:
-  build-aarch64:
-    name: macOS build (aarch64)
-    runs-on: macos-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          submodules: false
-
-      - name: Install stable toolchain
-        run: rustup toolchain install stable
-
-      - name: Check rust version
-        run: rustc +stable --version
-
-      - name: Install llvm/clang
-        run: |
-          brew install llvm
-          echo "/opt/homebrew/opt/llvm/bin" >> $GITHUB_PATH
-
-      - name: Create artifacts directory
-        run: mkdir -p artifacts
-
-      - name: Build release binary (tiny config)
-        run: cargo build --profile prod --target aarch64-apple-darwin --features "tiny,fuzz"
-
-      - name: Copy binary to artifacts (tiny config)
-        run: cp target/aarch64-apple-darwin/prod/fastroll artifacts/fastroll-macos-aarch64-tiny
-
-      - name: Build release binary (full config)
-        run: cargo build --profile prod --target aarch64-apple-darwin --features "full,fuzz"
-
-      - name: Copy binary to artifacts (full config)
-        run: cp target/aarch64-apple-darwin/prod/fastroll artifacts/fastroll-macos-aarch64-full
-
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: aarch64-binaries
-          path: artifacts/*
-          retention-days: 21
-
-  build-linux-x86_64:
-    name: Linux build (x86_64)
+  docker-image:
+    name: Docker image
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: false
 
-      - name: Install stable toolchain
-        run: rustup toolchain install stable
-
-      - name: Check rust version
-        run: rustc +stable --version
-
-      - name: Install libclang-dev
-        run: sudo apt-get install libclang-dev
-
-      - name: Create artifacts directory
-        run: mkdir -p artifacts
-
-      - name: Build release binary (tiny config)
-        run: cargo build --profile prod --target x86_64-unknown-linux-gnu --features "tiny,fuzz"
-
-      - name: Copy binary to artifacts (tiny config)
-        run: cp target/x86_64-unknown-linux-gnu/prod/fastroll artifacts/fastroll-linux-x86_64-tiny
-
-      - name: Build release binary (full config)
-        run: cargo build --profile prod --target x86_64-unknown-linux-gnu --features "full,fuzz"
-
-      - name: Copy binary to artifacts (full config)
-        run: cp target/x86_64-unknown-linux-gnu/prod/fastroll artifacts/fastroll-linux-x86_64-full
-
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: linux-binaries
-          path: artifacts/*
-          retention-days: 21
-
-  release:
-    name: Github Release
-    needs: [ build-aarch64, build-linux-x86_64 ]
-    runs-on: ubuntu-latest
-    if: success()
+      - name: Set image metadata
+        id: meta
+        shell: bash
+        run: |
+          image="ghcr.io/${GITHUB_REPOSITORY,,}"
+          version="$(python3 -c 'import tomllib; print(tomllib.load(open("Cargo.toml", "rb"))["workspace"]["package"]["version"])')"
+          echo "image=${image}" >> "${GITHUB_OUTPUT}"
+          echo "version=${version}" >> "${GITHUB_OUTPUT}"
+          echo "Image: ${image}:${version}"
 
-    steps:
-      - uses: actions/checkout@v4
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
-      - name: Download artifacts (aarch64)
-        uses: actions/download-artifact@v4
+      - name: Login to GHCR
+        uses: docker/login-action@v3
         with:
-          name: aarch64-binaries
-          path: ./release-artifacts
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Download artifacts (linux-x86_64)
-        uses: actions/download-artifact@v4
+      - name: Build and publish Docker image
+        id: build
+        uses: docker/build-push-action@v6
         with:
-          name: linux-binaries
-          path: ./release-artifacts
-
-      - name: Version tag
-        id: version
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64
+          push: true
+          tags: |
+            ${{ steps.meta.outputs.image }}:latest
+            ${{ steps.meta.outputs.image }}:${{ steps.meta.outputs.version }}
+          labels: |
+            org.opencontainers.image.source=https://github.com/${{ github.repository }}
+            org.opencontainers.image.revision=${{ github.sha }}
+            org.opencontainers.image.version=${{ steps.meta.outputs.version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Summary
         run: |
-          VERSION="v$(date +'%Y.%m.%d')-${GITHUB_SHA::7}"
-          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
-          echo "Version: $VERSION"
-
-      - name: Release
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ steps.version.outputs.VERSION }}
-          name: FastRoll ${{ steps.version.outputs.VERSION }}
-          files: ./release-artifacts/*
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          {
+            echo "Published Docker image:"
+            echo "- \`${{ steps.meta.outputs.image }}:latest\`"
+            echo "- \`${{ steps.meta.outputs.image }}:${{ steps.meta.outputs.version }}\`"
+            echo ""
+            echo "Digest: \`${{ steps.build.outputs.digest }}\`"
+          } >> "${GITHUB_STEP_SUMMARY}"