-
Notifications
You must be signed in to change notification settings - Fork 1
deployment_cicd_multiarch
Stand: 26. Dezember 2025
Version: v1.3.1
Kategorie: 🚀 Deployment
This document describes the continuous integration and deployment setup for ThemisDB's multi-architecture builds, including ARM support.
ThemisDB uses GitHub Actions for automated building and testing across multiple architectures.
Purpose: Validates ARM compilation on every code change.
Triggers:
- Push to
mainordevelopbranches (when ARM-related files change) - Pull requests to
mainordevelop - Manual workflow dispatch
Jobs:
- Uses QEMU emulation to build Docker image for
linux/arm64 - Validates the Dockerfile multi-arch support
- Tests basic image functionality
- Uses QEMU emulation to build Docker image for
linux/arm/v7 - Validates Raspberry Pi 2/3 compatibility
- Tests basic image functionality
- Installs ARM64 cross-compiler toolchain
- Configures CMake with
aarch64-linux-gnu-gcc - Verifies architecture detection
- Checks for NEON optimization flags
- Runs
scripts/test-arm-support.sh - Validates architecture detection logic
- Ensures build presets are correct
Results:
- Summary table in GitHub Actions UI
- Fails if any ARM build test fails
Purpose: Comprehensive build matrix for all supported platforms.
Triggers:
- Push to
main,develop, orcopilot/**branches - Pull requests to
mainordevelop - Manual workflow dispatch with optional ARM build toggle
Build Matrix (v1.3.0):
| OS | Architecture | Config | Preset | LLM | RPC | GPU/CUDA |
|---|---|---|---|---|---|---|
| Ubuntu 22.04 | x64 | Release Minimal | linux-ninja-clang-release | OFF | OFF | OFF |
| Ubuntu 22.04 | x64 | Release LLM | linux-llm-release | ON | OFF | OFF |
| Ubuntu 22.04 | x64 | Release LLM+GPU | linux-llm-gpu-release | ON | OFF | ON |
| Ubuntu 22.04 | x64 | Release Full | linux-full-release | ON | ON | ON |
| Ubuntu 22.04 | x64 | Debug | linux-ninja-clang-debug | OFF | OFF | OFF |
| Ubuntu 22.04 | arm64 | Release | linux-arm64-gcc-release | OFF | OFF | OFF |
| Ubuntu 22.04 | arm64 | Release LLM | linux-arm64-llm-release | ON | OFF | OFF |
Modular Build Flags (v1.3.0):
-
THEMIS_ENABLE_LLM=ON/OFF- Enable llama.cpp LLM integration (+96 files) -
THEMIS_BUILD_RPC_FRAMEWORK=ON/OFF- Enable gRPC RPC framework (+26 files) -
THEMIS_ENABLE_CUDA=ON/OFF- Enable NVIDIA CUDA GPU acceleration -
THEMIS_ENABLE_GPU=ON/OFF- Enable GPU vector search (FAISS)
Features:
- vcpkg caching for faster builds
- Artifact upload for built binaries
- Docker multi-arch builds with QEMU
- Automatic push to GitHub Container Registry (on main branch)
- Modular feature matrix for flexible deployments
Docker Platforms:
-
linux/amd64(x86_64) -
linux/arm64(ARM64/AArch64) -
linux/arm/v7(ARMv7)
Successful builds produce the following artifacts:
Core Builds:
-
themisdb-ubuntu-22.04-x64-Release- Linux x86_64 binaries (minimal) -
themisdb-ubuntu-22.04-x64-Debug- Linux x86_64 debug binaries -
themisdb-ubuntu-22.04-arm64-Release- Linux ARM64 binaries (minimal)
Feature Builds (v1.3.0):
-
themisdb-ubuntu-22.04-x64-llm-Release- With LLM integration -
themisdb-ubuntu-22.04-x64-llm-gpu-Release- With LLM + CUDA -
themisdb-ubuntu-22.04-x64-full-Release- With LLM + RPC + GPU -
themisdb-ubuntu-22.04-arm64-llm-Release- ARM64 with LLM
Artifacts are retained for 7 days.
Multi-architecture Docker images are automatically built and optionally pushed to:
GitHub Container Registry:
-
ghcr.io/makr-code/themisdb:main- Latest main branch build (minimal) -
ghcr.io/makr-code/themisdb:main-llm- Latest with LLM -
ghcr.io/makr-code/themisdb:main-llm-gpu- Latest with LLM + GPU -
ghcr.io/makr-code/themisdb:main-full- Latest with all features -
ghcr.io/makr-code/themisdb:develop- Latest develop branch build -
ghcr.io/makr-code/themisdb:<branch>-<sha>- Branch builds with commit SHA
Docker Hub (Public):
-
themisdb/themisdb:latest- Latest stable (minimal, ~150 MB) -
themisdb/themisdb:v1.3.0- Version 1.3.0 (minimal) -
themisdb/themisdb:v1.3.0-llm- Version 1.3.0 with LLM (~250 MB) -
themisdb/themisdb:v1.3.0-gpu- Version 1.3.0 with LLM + GPU (~300 MB) -
themisdb/themisdb:v1.3.0-full- Version 1.3.0 with all features (~350 MB)
Supported Platforms per Image:
linux/amd64linux/arm64linux/arm/v7
Docker automatically selects the correct image for your platform when pulling.
Using Docker Buildx:
# Enable BuildKit
export DOCKER_BUILDKIT=1
# Build for ARM64
docker buildx build \
--platform linux/arm64 \
-t themisdb:arm64-local \
-f Dockerfile .
# Build for ARMv7
docker buildx build \
--platform linux/arm/v7 \
-t themisdb:armv7-local \
-f Dockerfile .Using Cross-Compilation:
# Install ARM64 cross-compiler
sudo apt-get install gcc-aarch64-linux-gnu g++-aarch64-linux-gnu
# Bootstrap vcpkg
git clone https://github.com/microsoft/vcpkg.git ~/vcpkg
cd ~/vcpkg && ./bootstrap-vcpkg.sh
export VCPKG_ROOT=~/vcpkg
# Configure for ARM64
cmake -S . -B build-arm64 \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_TOOLCHAIN_FILE=$VCPKG_ROOT/scripts/buildsystems/vcpkg.cmake \
-DCMAKE_C_COMPILER=aarch64-linux-gnu-gcc \
-DCMAKE_CXX_COMPILER=aarch64-linux-gnu-g++ \
-DCMAKE_SYSTEM_NAME=Linux \
-DCMAKE_SYSTEM_PROCESSOR=aarch64
# Build
cmake --build build-arm64 -j$(nproc)# Ensure vcpkg is set up
export VCPKG_ROOT=~/vcpkg
# Run validation
./scripts/test-arm-support.shUses GitHub Actions cache to store compiled vcpkg packages:
env:
VCPKG_BINARY_SOURCES: 'clear;x-gha,readwrite'This significantly speeds up subsequent builds (from 30+ minutes to 5-10 minutes).
Uses GitHub Actions cache for Docker layers:
cache-from: type=gha
cache-to: type=gha,mode=maxReduces Docker build time by reusing unchanged layers.
| Platform | Configuration | First Build | Cached Build |
|---|---|---|---|
| x86_64 | Release | 25-30 min | 5-8 min |
| x86_64 | Debug | 20-25 min | 4-6 min |
| ARM64 (cross) | Release | 35-45 min | 8-12 min |
| ARM64 (QEMU) | Release | 60-90 min | 15-25 min |
| ARMv7 (QEMU) | Release | 70-100 min | 20-30 min |
QEMU emulation is slower but allows testing ARM builds without actual ARM hardware.
- Use cross-compilation for faster ARM builds (35-45 min vs 60-90 min)
- Enable caching to reduce subsequent build times by 70-80%
- Run ARM builds only when necessary (use path filters)
- Use manual workflow dispatch for experimental ARM builds
When code is pushed to main:
- Multi-arch Docker images are built
- Images are tagged with
main,<commit-sha>, and version tags - Images are pushed to GitHub Container Registry
- All platforms (amd64, arm64, arm/v7) are included
On pull requests:
- ARM builds are tested via Docker and cross-compilation
- Images are built but not pushed
- Test results are shown in PR status checks
If QEMU builds timeout:
- Reduce build parallelism:
-j2instead of-j$(nproc) - Disable tests:
-DTHEMIS_BUILD_TESTS=OFF - Use workflow dispatch with manual ARM build toggle
Common issues:
- Missing cross-compiler: Install
gcc-aarch64-linux-gnu - vcpkg triplet mismatch: Ensure
arm64-linuxtriplet is used - System libraries: Some dependencies may need ARM64 system libraries
If builds fail with vcpkg errors:
- Clear cache manually in GitHub Actions settings
- Rebuild vcpkg baseline: Update
vcpkg.jsonbaseline commit
The README displays build status for all architectures:
[](https://github.com/makr-code/ThemisDB/actions/workflows/arm-build.yml)
[](https://github.com/makr-code/ThemisDB/actions/workflows/build-multiarch.yml)View all workflow runs: https://github.com/makr-code/ThemisDB/actions
Filter by:
- Workflow:
arm-build.ymlorbuild-multiarch.yml - Branch:
main,develop, etc. - Event:
push,pull_request,workflow_dispatch
Planned CI/CD improvements:
- Hardware Testing: Run tests on actual ARM hardware (Raspberry Pi, AWS Graviton)
- Performance Benchmarks: Automated ARM vs x86_64 performance comparisons
- Release Automation: Automatic binary packaging and GitHub releases
- Matrix Expansion: Add macOS ARM64 (Apple Silicon) builds
- Test Coverage: ARM-specific test coverage reports
For CI/CD issues:
- Check workflow logs in GitHub Actions
- Review this documentation
- See
docs/ARM_RASPBERRY_PI_BUILD.mdfor build requirements - Open an issue with workflow run URL and error logs
- Architecture-ACCESS-MODEL-IMPLEMENTATION-SUMMARY
- Architecture-ADR-003-pg-dump-sql-parser
- Architecture-BASEENTITY-PRINCIPLE
- Architecture-CACHE-STORAGE-INTEGRATION
- Architecture-CMAKE-ARCHITECTURE
- Architecture-CMAKE-FLAGS-REFERENCE
- Architecture-CMAKE-MODULAR-ARCHITECTURE
- Architecture-CONCERNS-ARCHITECTURE-DIAGRAM
- Architecture-CONCERNS-IMPLEMENTATION-SUMMARY
- Architecture-CONTENT-MODEL
- Architecture-COPILOT-THEMISDB-GRAPH-RAG-BACKEND-ARCHITECTURE
- Architecture-CRYPTO-AND-KEYS
- Architecture-FEATURE-FLAGS-REFERENCE
- Architecture-GPU-ARCHITECTURE-REVIEW-TEMPLATE
- Architecture-HTTP-SHUTDOWN-HARDENING
- Architecture-MIGRATION-GUIDE-CONCERNS
- Architecture-MIGRATION-GUIDE-v13-v14
- Architecture-MODULARIZATION-GUIDE
- Architecture-MODULAR-ARCHITECTURE-ROADMAP
- Architecture-MODULE-ARCHITECTURE-INDEX
- Architecture-P1D01-ISSMPLUGIN-DESIGN-REVIEW
- Architecture-P1-D01-ISSMPLUGIN-DESIGN-REVIEW
- Architecture-P1-D08-MAMBA-GOVERNANCE-CONTRACT
- Architecture-P1-P2-IMPLEMENTATION-COMPLETION-INDEX
- Architecture-PHASE0-COMPLETION-ASSESSMENT
- Architecture-PHASE3-QUERYENGINE-DI-ARCHITECTURE
- Architecture-PHASE4-INDEX-MANAGER-DI
- Architecture-POSTGRESQL-WIRE-PROTOCOL
- Architecture-QUERYENGINE-IMPLEMENTATION-GUIDE
- Architecture-QUERY-SCHEDULING
- Architecture-RAFT-CONSENSUS-DESIGN
- Architecture-README
- Architecture-README-SSM-HYBRID-IMPLEMENTATION
- Architecture-REFACTORING-SUMMARY
- Architecture-RESOURCE-POOLING
- Architecture-SOURCE-DIRECTORY-GUIDE
- Architecture-THEMIS-CORE-GUIDE
- Architecture-UNIFIED-ACCESS-MODEL
- Architecture-WAL-GRPC-MTLS-CONFIGURATION
- Architecture-WIRE-PROTOCOL-RETRY
- Architecture-boltzmann-observability-draft
- Architecture-experimental-logarithmic-vector-storage
- Architecture-llm-wiki-mvp-adr
- Architecture-rewrite-engine-architecture
- Architecture-rope-api-architecture
- Architecture-ssm-gguf-mamba-status
- Architecture-ssm-hybrid-analysis
- Architecture-ssm-hybrid-rollout-plan
- Architecture-ssm-plugin-interface-design-review
- Architecture-transaction-coordinators
- Architecture-wiki-secondary-index
- Architecture-wire-protocol
- Governance-DISABLED-STUB-POLICY
- Governance-DOCS-PR-POLICY
- Governance-GA-PROMOTION-SIGN-OFF
- Governance-GITHUB-MILESTONES-SETUP
- Governance-MATURITY-CLAIM-VERIFICATION-CHECKLIST
- Governance-MATURITY-EVIDENCE-REGISTRY
- Governance-MERGE-GATE-BOT-CONFIG
- Governance-MERGE-GATE-STATUS-LIVE
- Governance-PHASE3-ENFORCEMENT-RUNBOOK
- Governance-PHASE-1-CLOSURE-REPORT
- Governance-PHASE-CLOSURE-POLICY
- Governance-PHASE-DEPENDENCY-GRAPH
- Governance-PLUGIN-SUBMODULE-ROLLBACK
- Governance-PRODUCTION-READY-2026-DELIVERY-PLAN
- Governance-PR-VERSION-TARGETING
- Governance-PR-VERSION-TARGETING-BACKFILL
- Governance-QUERY-MODULE-STATUS
- Governance-README
- Governance-RELEASE-PROMOTION-GATE-POLICY
- Governance-RELEASE-VALIDATION-CHECKLIST
- Governance-SECURITY-MODULE-5671-EVIDENCE-SUMMARY
- Governance-SHARDING-P6-RESIDUAL-RISK-ACCEPTANCE
- Governance-SOURCECODE-COMPLIANCE-GOVERNANCE
- Governance-UPDATES-DEVELOPMENT-STATUS-SIGN-OFF
- Governance-WAVE-C-IMPLEMENTATION-COMPLETE
- Module-acceleration-Roadmap
- Module-access-model-Roadmap
- Module-ai-Roadmap
- Module-analytics-Roadmap
- Module-api-Roadmap
- Module-aql-Roadmap
- Module-auth-Roadmap
- Module-base-Roadmap
- Module-cache-Roadmap
- Module-cdc-Roadmap
- Module-chaos-Roadmap
- Module-chimera-Roadmap
- Module-config-Roadmap
- Module-content-Roadmap
- Module-core-Roadmap
- Module-distributed-knowledge-Roadmap
- Module-distributed-tensor-Roadmap
- Module-document-Roadmap
- Module-ethics-ai-Roadmap
- Module-evaluation-Roadmap
- Module-execution-Roadmap
- Module-exporters-Roadmap
- Module-failover-Roadmap
- Module-geo-Roadmap
- Module-governance-Roadmap
- Module-gpu-Roadmap
- Module-graph-Roadmap
- Module-image-analysis-Roadmap
- Module-importers-Roadmap
- Module-index-Roadmap
- Module-ingestion-Roadmap
- Module-llama-cpp-Roadmap
- Module-llm-Roadmap
- Module-llm-streaming-Roadmap
- Module-llm-wiki-Roadmap
- Module-maintenance-Roadmap
- Module-metadata-Roadmap
- Module-network-Roadmap
- Module-observability-Roadmap
- Module-onnx-clip-Roadmap
- Module-performance-Roadmap
- Module-plugins-Roadmap
- Module-process-Roadmap
- Module-projects-Roadmap
- Module-prompt-engineering-Roadmap
- Module-query-Roadmap
- Module-rag-Roadmap
- Module-replication-Roadmap
- Module-retrieval-Roadmap
- Module-rpc-grpc-Roadmap
- Module-scheduler-Roadmap
- Module-scraper-Roadmap
- Module-search-Roadmap
- Module-security-Roadmap
- Module-server-Roadmap
- Module-sharding-Roadmap
- Module-stable-diffusion-Roadmap
- Module-storage-Roadmap
- Module-temporal-Roadmap
- Module-tensor-Roadmap
- Module-themis-Roadmap
- Module-timeseries-Roadmap
- Module-toolbox-Roadmap
- Module-training-Roadmap
- Module-transaction-Roadmap
- Module-updates-Roadmap
- Module-user-storage-encrypted-Roadmap
- Module-utils-Roadmap
- Module-vector-search-Roadmap
- Module-voice-Roadmap
- Module-whisper-Roadmap