Add Dockerfile

.github/workflows/docker.yml

@@ -0,0 +1,69 @@
+# This action enables building container images for subcoin node.
+name: Docker build
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - '**'
+    tags:
+      - '**'
+
+# Incremental compilation here isn't helpful
+env:
+  CARGO_INCREMENTAL: 0
+
+jobs:
+  container-linux:
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: write
+      packages: write
+    strategy:
+      matrix:
+        platform:
+          - arch: linux/amd64
+            profile: production
+            suffix: ubuntu-x86_64-${{ github.ref_name }}
+            image-suffix: ''
+
+    steps:
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Log into registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v3
+        with:
+          images: |
+            ghcr.io/subcoin-project/subcoin-node
+          tags: |
+            type=ref,event=tag
+            type=ref,event=branch
+            type=sha
+          flavor: |
+            latest=false
+            suffix=${{ matrix.platform.image-suffix }}
+
+      - name: Build and push ${{ matrix.image }} image
+        id: build
+        uses: docker/build-push-action@v2
+        with:
+          file: Dockerfile-${{ matrix.image }}
+          platforms: ${{ matrix.platform.arch }}
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            SUBSTRATE_CLI_GIT_COMMIT_HASH=${{ github.sha }}
+            PROFILE=${{ matrix.platform.profile }}

Dockerfile

@@ -0,0 +1,41 @@
+# This is an example build stage for the node template. Here we create the binary in a temporary image.
+
+# This is a base image to build substrate nodes
+FROM docker.io/paritytech/ci-linux:production as builder
+
+ARG PROFILE=production
+
+WORKDIR /subcoin
+
+COPY . .
+
+RUN cargo build --locked --profile=production
+
+# This is the 2nd stage: a very small image where we copy the binary."
+FROM docker.io/library/ubuntu:22.04
+LABEL description="Multistage Docker image for Substrate Node Template" \
+  image.type="builder" \
+  image.authors="[email protected]" \
+  image.vendor="Substrate Developer Hub" \
+  image.description="Multistage Docker image for Substrate Node Template" \
+  image.source="https://github.com/substrate-developer-hub/substrate-subcoin" \
+  image.documentation="https://github.com/substrate-developer-hub/substrate-subcoin"
+
+# Copy the node binary.
+COPY --from=builder /subcoin/target/production/subcoin /usr/local/bin
+
+RUN useradd -m -u 1000 -U -s /bin/sh -d /node-dev node-dev && \
+  mkdir -p /chain-data /node-dev/.local/share && \
+  chown -R node-dev:node-dev /chain-data && \
+  ln -s /chain-data /node-dev/.local/share/subcoin && \
+  # unclutter and minimize the attack surface
+  rm -rf /usr/bin /usr/sbin && \
+  # check if executable works in this container
+  /usr/local/bin/subcoin --version
+
+USER node-dev
+
+EXPOSE 30333 9933 9944 9615
+VOLUME ["/chain-data"]
+
+ENTRYPOINT ["/usr/local/bin/subcoin"]