chore: sync local changes (arm64 nightly, cache, ENTRYPOINT, clang/g++)

Author: dvershinin

.github/workflows/main.yml

@@ -3,11 +3,14 @@ name: ci
 on:
   push:
     branches:
+      - main
       - master
     paths-ignore:
       - '**/README.md'
     tags:
       - '*'
+  schedule:
+    - cron: '0 3 * * 1'
   workflow_dispatch:
     inputs:
       push:
@@ -69,65 +72,89 @@ jobs:
           curl -fL "https://raw.githubusercontent.com/b4b4r07/httpstat/master/httpstat.sh" -o _dl/httpstat.sh
 
       - name: Login to Docker Hub
-        if: inputs.push == true || github.event_name == 'push'
+        if: inputs.push == true || github.event_name == 'push' || github.event_name == 'schedule'
         uses: docker/login-action@v2
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Set up QEMU
-        if: inputs.push == true || github.event_name == 'push'
+        if: github.event_name == 'schedule'
         uses: docker/setup-qemu-action@v3
         with:
-          platforms: linux/amd64
+          platforms: linux/arm64
 
       - name: Set up Docker Buildx
-        if: inputs.push == true || github.event_name == 'push'
+        if: inputs.push == true || github.event_name == 'push' || github.event_name == 'schedule'
         uses: docker/setup-buildx-action@v2
 
       - name: Build (no push) via docker build (act)
         if: inputs.push != true && github.event_name != 'push' && env.ACT == 'true'
         run: |
           DOCKER_BUILDKIT=1 docker build --platform linux/amd64 --load \
-            -t curl-http3:${IMAGE_TAG} -t curl-http3:latest .
+            -t curl-edge:${IMAGE_TAG} -t curl-edge:latest .
 
       - name: Build (no push)
-        if: inputs.push != true && github.event_name != 'push' && env.ACT != 'true'
+        if: inputs.push != true && github.event_name != 'push' && github.event_name != 'schedule' && env.ACT != 'true'
         uses: docker/build-push-action@v4
         with:
           context: .
           push: false
           platforms: linux/amd64
           load: true
           tags: |
-            curl-http3:${{ env.IMAGE_TAG }}
-            curl-http3:latest
+            curl-edge:${{ env.IMAGE_TAG }}
+            curl-edge:latest
 
       - name: Test curl -V
         if: inputs.push != true && github.event_name != 'push'
-        run: docker run --rm curl-http3:${IMAGE_TAG} curl -V
+        run: docker run --rm curl-edge:${IMAGE_TAG} -V
 
       - name: Test HTTP/3 to Cloudflare
         if: inputs.push != true && github.event_name != 'push'
         run: |
-          docker run --rm --network host curl-http3:${IMAGE_TAG} \
-            curl -I --http3 https://cloudflare-quic.com/ || \
-          docker run --rm --network host curl-http3:${IMAGE_TAG} \
-            curl -I --http3 https://www.cloudflare.com/ --connect-timeout 10 || true
+          docker run --rm --network host curl-edge:${IMAGE_TAG} \
+            -I --http3 https://cloudflare-quic.com/ || \
+          docker run --rm --network host curl-edge:${IMAGE_TAG} \
+            -I --http3 https://www.cloudflare.com/ --connect-timeout 10 || true
 
       - name: Test httpstat script
         if: inputs.push != true && github.event_name != 'push'
         run: |
-          docker run --rm --network host curl-http3:${IMAGE_TAG} \
+          docker run --rm --network host curl-edge:${IMAGE_TAG} \
             /opt/httpstat.sh -I --http3 https://cloudflare-quic.com/ || true
 
-      - name: Build and push
+      - name: Build and push (push/dispatch, amd64 only)
         if: inputs.push == true || github.event_name == 'push'
         uses: docker/build-push-action@v4
         with:
           context: .
           push: true
           platforms: linux/amd64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: |
+            getpagespeed/curl-edge:amd64-${{ env.IMAGE_TAG }}
+            getpagespeed/curl-edge:latest-amd64
+
+      - name: Build and push (nightly, arm64 only)
+        if: github.event_name == 'schedule'
+        uses: docker/build-push-action@v4
+        with:
+          context: .
+          push: true
+          platforms: linux/arm64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
           tags: |
-            ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.GITHUB_REPOSITORY_NAME_PART }}:${{ env.IMAGE_TAG }}
-            ${{ secrets.DOCKERHUB_USERNAME }}/${{ env.GITHUB_REPOSITORY_NAME_PART }}:latest
+            getpagespeed/curl-edge:arm64-${{ env.IMAGE_TAG }}
+            getpagespeed/curl-edge:latest-arm64
+
+      - name: Create multi-arch manifest (nightly)
+        if: github.event_name == 'schedule'
+        run: |
+          docker buildx imagetools create \
+            -t getpagespeed/curl-edge:${IMAGE_TAG} \
+            -t getpagespeed/curl-edge:latest \
+            getpagespeed/curl-edge:amd64-${IMAGE_TAG} \
+            getpagespeed/curl-edge:arm64-${IMAGE_TAG}

Dockerfile

@@ -1,10 +1,14 @@
 FROM alpine:edge AS builder
 
-LABEL maintainer="Yury Muski <muski.yury@gmail.com>"
+LABEL maintainer="Danila Vershinin <[email protected].com>"
 
 WORKDIR /opt
 
-RUN apk add --no-cache build-base git autoconf libpsl-dev libtool cmake go curl nghttp2-dev zlib-dev automake rustup && rustup-init -y -q
+RUN apk add --no-cache build-base git autoconf libpsl-dev libtool cmake go curl nghttp2-dev zlib-dev automake rustup clang lld ninja pkgconf python3 linux-headers && rustup-init -y -q
+
+# Prefer clang toolchain for BoringSSL/quiche on all arches (including arm64)
+ENV CC=clang
+ENV CXX=g++
 
 COPY _dl/quiche.tar.gz /opt/quiche.tar.gz
 COPY _dl/curl.tar.gz /opt/curl.tar.gz
@@ -13,7 +17,7 @@ RUN mkdir -p /opt/quiche-src && \
     tar -xzf /opt/quiche.tar.gz -C /opt/quiche-src --strip-components=1 && \
     rm /opt/quiche.tar.gz
 RUN cd /opt/quiche-src && \
-    PATH="$HOME/.cargo/bin:$PATH" cargo build --package quiche --release --features ffi,pkg-config-meta,qlog && \
+    RUST_BACKTRACE=1 PATH="$HOME/.cargo/bin:$PATH" cargo build -vv --package quiche --release --features ffi,pkg-config-meta,qlog --jobs $(nproc) && \
     mkdir -p quiche/deps/boringssl/src/lib && \
     ln -vnf $(find target/release -name libcrypto.a -o -name libssl.a) quiche/deps/boringssl/src/lib/
 
@@ -35,4 +39,4 @@ WORKDIR /opt
 COPY _dl/httpstat.sh /opt/httpstat.sh
 RUN chmod +x /opt/httpstat.sh
 
-CMD ["curl"]
+ENTRYPOINT ["curl"]

README.md

@@ -1,13 +1,13 @@
-# curl-http3
-[![](https://img.shields.io/docker/pulls/ymuski/curl-http3?style=flat-square)](https://hub.docker.com/r/ymuski/curl-http3)
+# curl-edge
+[![](https://img.shields.io/docker/pulls/getpagespeed/curl-edge?style=flat-square)](https://hub.docker.com/r/getpagespeed/curl-edge)
 
-Docker image of `curl` compiled with  `BoringSSL` and `quiche/0.17.2` for **HTTP3 support**, `httpstat` for visualization.
+Bleeding‑edge Docker image of `curl` with `BoringSSL` and `quiche` (HTTP/3), plus `httpstat` for visualization.
 
 Link for [curl + http3 manual](https://github.com/curl/curl/blob/master/docs/HTTP3.md#quiche-version)
 
 ## Usage
 
-`docker run -it --rm ymuski/curl-http3 curl -V`
+`docker run -it --rm getpagespeed/curl-edge -V`
 ```
 curl 8.1.2-DEV (x86_64-pc-linux-gnu) libcurl/8.1.2-DEV BoringSSL quiche/0.17.2
 Release-Date: [unreleased]
@@ -16,9 +16,9 @@ Features: alt-svc AsynchDNS HSTS HTTP3 HTTPS-proxy IPv6 Largefile NTLM NTLM_WB S
 ```
 
 
-`docker run -it --rm ymuski/curl-http3 curl -IL https://blog.cloudflare.com --http3`
+`docker run -it --rm getpagespeed/curl-edge -IL https://blog.cloudflare.com --http3`
 
-`docker run -it --rm ymuski/curl-http3 curl -IL https://yurets.pro --http3`
+`docker run -it --rm getpagespeed/curl-edge -IL https://yurets.pro --http3`
 
 ```
 
@@ -39,19 +39,19 @@ alt-svc: h3=":443"; ma=86400
 
 ### httpstat support
 
-`docker run -it --rm ymuski/curl-http3 ./httpstat.sh -ILv https://blog.cloudflare.com --http3`
+`docker run -it --rm getpagespeed/curl-edge ./httpstat.sh -ILv https://blog.cloudflare.com --http3`
 
-`docker run -it --rm ymuski/curl-http3 ./httpstat.sh -ILv https://yurets.pro --http3`
+`docker run -it --rm getpagespeed/curl-edge ./httpstat.sh -ILv https://yurets.pro --http3`
 
 ![](httpstat.png?raw=true "HTTPSTAT H3")
 
 
 ## Build
 
 ```
-docker buildx build --platform linux/amd64  -t ymuski/curl-http3:latest -t ymuski/curl-http3:8.1.2 . --push
+docker buildx build --platform linux/amd64  -t getpagespeed/curl-edge:latest -t getpagespeed/curl-edge:8.1.2 . --push
 
 # quiche fails to compile for arm
-docker buildx build --platform linux/arm,linux/arm64,linux/amd64  -t ymuski/curl-http3:latest -t ymuski/curl-http3:8.1.2 . --push
+docker buildx build --platform linux/arm,linux/arm64,linux/amd64  -t getpagespeed/curl-edge:latest -t getpagespeed/curl-edge:8.1.2 . --push
 
 ```