Update Docker to Debian and add comprehensive CI/CD workflows

Co-authored-by: elasticdotventures <[email protected]>

Author: Copilot

.github/workflows/ci.yml

@@ -0,0 +1,51 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-test:
+    name: Build and Test
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Cache cargo registry & target
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-
+
+      - name: Install Rust toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: 1.91.1
+          override: true
+          components: clippy, rustfmt
+
+      - name: Show rustc & cargo versions
+        run: |
+          rustc --version
+          cargo --version
+
+      - name: Build (release)
+        run: cargo build --locked --release
+
+      - name: Run tests
+        run: cargo test --locked --all -- --nocapture

.github/workflows/release-and-publish.yml

@@ -0,0 +1,93 @@
+name: Release & Publish (GHCR + cross-compiled binaries)
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build-push-and-release:
+    name: Build, Push Docker, Create Release, Upload Binaries
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - name: Checkout (full history & tags)
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Authenticate to GHCR
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Determine tag name
+        id: tag
+        run: |
+          echo "ref_name=${GITHUB_REF##*/}" &> $GITHUB_OUTPUT
+
+      - name: Build and push multi-arch Docker image
+        uses: docker/build-push-action@v4
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/${{ github.repository_owner }}/rust-cargo-docs-rag-mcp:${{ steps.tag.outputs.ref_name }}
+            ghcr.io/${{ github.repository_owner }}/rust-cargo-docs-rag-mcp:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Create GitHub release
+        id: create_release
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ steps.tag.outputs.ref_name }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Prepare for cross-compilation (install toolchains)
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y gcc-aarch64-linux-gnu g++-aarch64-linux-gnu binutils-aarch64-linux-gnu
+          rustup default 1.91.1
+          rustup target add x86_64-unknown-linux-gnu aarch64-unknown-linux-gnu
+
+      - name: Build x86_64-unknown-linux-gnu release binary
+        run: |
+          cargo build --locked --release --target x86_64-unknown-linux-gnu
+          strip target/x86_64-unknown-linux-gnu/release/cratedocs || true
+
+      - name: Build aarch64-unknown-linux-gnu release binary
+        run: |
+          export CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc
+          cargo build --locked --release --target aarch64-unknown-linux-gnu
+          strip target/aarch64-unknown-linux-gnu/release/cratedocs || true
+
+      - name: Upload x86_64 binary to release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: target/x86_64-unknown-linux-gnu/release/cratedocs
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload aarch64 binary to release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: target/aarch64-unknown-linux-gnu/release/cratedocs
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Dockerfile

@@ -1,10 +1,12 @@
-FROM rust:1.91.1-alpine3.20 AS builder
+FROM rust:1.91.1-slim-bullseye AS builder
 
-RUN apk add --no-cache \
-    build-base \
-    pkgconfig \
-    openssl-dev \
-    git
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    pkg-config \
+    libssl-dev \
+    git \
+    ca-certificates \
+ && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 
@@ -19,9 +21,9 @@ COPY . .
 
 RUN cargo build --locked --release --bin cratedocs
 
-FROM alpine:3.20
+FROM debian:bullseye-slim
 
-RUN apk add --no-cache ca-certificates libgcc libstdc++ libssl3
+RUN apt-get update && apt-get install -y ca-certificates libssl1.1 && rm -rf /var/lib/apt/lists/*
 
 COPY --from=builder /app/target/release/cratedocs /usr/local/bin/cratedocs
 COPY docker/entrypoint.sh /entrypoint.sh

docker/entrypoint.sh

@@ -1,16 +1,30 @@
 #!/bin/sh
-set -eu
+set -e
 
+# docker/entrypoint.sh - small wrapper to start cratedocs with the configured mode
 MODE="${CRATEDOCS_MODE:-http}"
 ADDRESS="${CRATEDOCS_ADDRESS:-0.0.0.0:8080}"
 DEBUG="${CRATEDOCS_DEBUG:-false}"
 
-if [ "$MODE" = "http" ]; then
-    if [ "$DEBUG" = "true" ]; then
-        exec /usr/local/bin/cratedocs http --address "$ADDRESS" --debug "$@"
+# If explicit args provided, run with those
+if [ "$#" -gt 0 ]; then
+  exec /usr/local/bin/cratedocs "$@"
+fi
+
+# default behavior: start in selected mode
+case "$MODE" in
+  http)
+    if [ "${DEBUG}" = "true" ]; then
+      exec /usr/local/bin/cratedocs http --address "$ADDRESS" --debug
     else
-        exec /usr/local/bin/cratedocs http --address "$ADDRESS" "$@"
+      exec /usr/local/bin/cratedocs http --address "$ADDRESS"
     fi
-else
-    exec /usr/local/bin/cratedocs "$MODE" "$@"
-fi
+    ;;
+  stdio)
+    exec /usr/local/bin/cratedocs stdio
+    ;;
+  *)
+    echo "Unknown CRATEDOCS_MODE: $MODE" >&2
+    exit 2
+    ;;
+esac