chore: decouple Go build

Author: daniilrrr

.github/workflows/publish-images-dry-run.yaml

@@ -1,22 +1,22 @@
-## This workflow runs on PRs to `main` to confirm that all Docker images will build successfully. It does not actually push the images to the registry.
-## It does not actually publish the images anywhere.
-#
-#name: Publish Service Images (Dry Run)
-#
-#on:
-#  pull_request:
-#    branches: [main]
-#
-#permissions:
-#  contents: read
-#  id-token: write
-#  packages: write
-#
-#jobs:
-#  docker:
-#    uses: ./.github/workflows/publish-images.yaml
-#    with:
-#      dry_run: true
-#      runner_label: shared-large-01
-#      service: "" # all services
-#    secrets: inherit
+# This workflow runs on PRs to `main` to confirm that all Docker images will build successfully. It does not actually push the images to the registry.
+# It does not actually publish the images anywhere.
+
+name: Publish Service Images (Dry Run)
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  id-token: write
+  packages: write
+
+jobs:
+  docker:
+    uses: ./.github/workflows/publish-images.yaml
+    with:
+      dry_run: true
+      runner_label: shared-large-01
+      service: "" # all services
+    secrets: inherit

Cargo.lock

@@ -20,7 +20,7 @@ members = [
   "test-framework",
 ]
 
-# Default members are the services that are built by default when running `cargo build` (leveraged by docker build to build less crates)
+# Default members are the services that are built by default when running `cargo build` (leveraged by docker build to build fewer crates)
 default-members = [
   "synd-batch-sequencer",
   "synd-chain-ingestor",

Cargo.toml

@@ -1,6 +1,7 @@
 # Global build arguments
 ARG BUILD_PROFILE=release
-ARG FEATURES="rocksdb" 
+ARG FEATURES="rocksdb"
+#ARG PACKAGE
 
 # Stage 1: Base image with Rust
 FROM rust:slim-bookworm AS builder
@@ -19,23 +20,29 @@ RUN --mount=type=cache,target=/var/cache/apt \
 FROM builder AS build
 COPY . .
 
-# Install SP1 toolchain using official installer
-RUN curl -L https://sp1up.succinct.xyz | bash
-ENV PATH="/root/.sp1/bin:${PATH}"
-RUN sp1up
-
-# Verify SP1 installation (optional)
-RUN cargo prove --version && \
-    rustup toolchain list | grep succinct
-
-# Build SP1 ELF program
-RUN cd synd-withdrawals/synd-tee-attestation-zk-proofs/sp1/program && \
-    cargo prove build && \
-    cd /app
+## Install SP1 toolchain using official installer
+#RUN curl -L https://sp1up.succinct.xyz | bash
+#ENV PATH="/root/.sp1/bin:${PATH}"
+#RUN sp1up
+#
+## Verify SP1 installation (optional)
+#RUN cargo prove --version && \
+#    rustup toolchain list | grep succinct
+#
+## Build SP1 ELF program
+#RUN cd synd-withdrawals/synd-tee-attestation-zk-proofs/sp1/program && \
+#    cargo prove build && \
+#    cd /app
+
+# TODO look at `withdrawals-test` feature flag to put ZK deps behind
 
 # Perform cargo build with cached Cargo and target directories
 RUN --mount=type=cache,target=/usr/local/cargo,from=rust:slim-bookworm,source=/usr/local/cargo \
-    cargo build --profile ${BUILD_PROFILE} --features "${FEATURES}" --locked
+    cargo build --package synd-batch-sequencer --profile ${BUILD_PROFILE} --locked && \
+    cargo build --package synd-chain-ingestor --profile ${BUILD_PROFILE}  --locked && \
+    cargo build --package synd-maestro --profile ${BUILD_PROFILE} --locked && \
+    cargo build --package synd-mchain --profile ${BUILD_PROFILE} --features "${FEATURES}" --locked && \
+    cargo build --package synd-translator --profile ${BUILD_PROFILE} --locked
 
 # --- Go build stage for synd-proposer ---
 FROM ghcr.io/syndicateprotocol/syndicate-appchains/node-builder AS nitro
@@ -57,16 +64,16 @@ FROM synd-proposer-build AS synd-proposer-test
 WORKDIR /synd-proposer  
 RUN go test ./...
 
-# Stage 3: Optional Foundry install
-FROM debian:bookworm-slim AS foundry
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    curl \
-    git \
-    ca-certificates && \
-    curl -L https://foundry.paradigm.xyz | bash && \
-    ~/.foundry/bin/foundryup && \
-    rm -rf /var/lib/apt/lists/*
+## Stage 3: Optional Foundry install
+#FROM debian:bookworm-slim AS foundry
+#RUN apt-get update && \
+#    apt-get install -y --no-install-recommends \
+#    curl \
+#    git \
+#    ca-certificates && \
+#    curl -L https://foundry.paradigm.xyz | bash && \
+#    ~/.foundry/bin/foundryup && \
+#    rm -rf /var/lib/apt/lists/*
 
 # Stage 3: Runtime images
 
@@ -81,8 +88,8 @@ FROM gcr.io/distroless/cc AS runtime-base
 FROM runtime-base AS synd-translator
 ARG BUILD_PROFILE
 COPY --from=build /app/target/${BUILD_PROFILE}/synd-translator /usr/local/bin/synd-translator
-COPY --from=foundry /root/.foundry /root/.foundry
-ENV PATH="/root/.foundry/bin:${PATH}"
+#COPY --from=foundry /root/.foundry /root/.foundry
+#ENV PATH="/root/.foundry/bin:${PATH}"
 ENTRYPOINT ["/usr/local/bin/synd-translator"]
 EXPOSE 8545 8546
 LABEL service=synd-translator
@@ -125,8 +132,8 @@ FROM ubuntu:22.04 AS synd-translator-debug
 ARG BUILD_PROFILE
 RUN apt-get update && apt-get install -y heaptrack libssl3 ca-certificates && rm -rf /var/lib/apt/lists/*
 COPY --from=build /app/target/${BUILD_PROFILE}/synd-translator /usr/local/bin/synd-translator
-COPY --from=foundry /root/.foundry /root/.foundry
-ENV PATH="/root/.foundry/bin:${PATH}"
+#COPY --from=foundry /root/.foundry /root/.foundry
+#ENV PATH="/root/.foundry/bin:${PATH}"
 ENTRYPOINT ["/usr/local/bin/synd-translator"]
 EXPOSE 8545 8546
 LABEL service=synd-translator

Dockerfile

@@ -9,14 +9,14 @@ rust-version.workspace = true
 version.workspace      = true
 
 [dependencies]
-alloy                                    = { workspace = true, features = ["node-bindings", "providers", "rpc-types-anvil"] }
-contract-bindings                        = { workspace = true }
-eyre                                     = { workspace = true }
-redis                                    = { workspace = true, features = ["tokio-comp"] }
-serde                                    = { workspace = true }
-serde_json                               = { workspace = true }
-shared                                   = { workspace = true }
-synd-mchain                              = { workspace = true }
-synd-tee-attestation-zk-proofs-submitter = { workspace = true }
-tokio                                    = { workspace = true, features = ["fs", "process", "rt-multi-thread"] }
-tracing                                  = { workspace = true }
+alloy             = { workspace = true, features = ["node-bindings", "providers", "rpc-types-anvil"] }
+contract-bindings = { workspace = true }
+eyre              = { workspace = true }
+jsonrpsee         = { workspace = true }
+redis             = { workspace = true, features = ["tokio-comp"] }
+serde             = { workspace = true }
+serde_json        = { workspace = true }
+shared            = { workspace = true }
+synd-mchain       = { workspace = true }
+tokio             = { workspace = true, features = ["fs", "process", "rt-multi-thread"] }
+tracing           = { workspace = true }

shared/test-utils/Cargo.toml

@@ -14,15 +14,16 @@ use alloy::{
     transports::http::Client,
 };
 use eyre::Result;
+use jsonrpsee::{core::client::ClientT, http_client::HttpClientBuilder};
 use redis::aio::ConnectionManager;
 use std::{
     env,
     future::Future,
+    io::Error,
     process::{ExitStatus, Stdio},
     time::Duration,
 };
 use synd_mchain::client::MProvider;
-use synd_tee_attestation_zk_proofs_submitter::{self, get_signer_public_key};
 use tokio::{
     io::{AsyncBufReadExt as _, BufReader},
     process::{Child, Command},
@@ -416,3 +417,12 @@ pub async fn launch_enclave_server() -> Result<(E2EProcess, String, Address)> {
 
     Ok((docker, enclave_rpc_url, signer_address))
 }
+
+/// Gets the public key from the TEE, no attestation. Used for testing only
+pub async fn get_signer_public_key(enclave_rpc_url: String) -> eyre::Result<String> {
+    let client = HttpClientBuilder::default()
+        .request_timeout(Duration::from_secs(10))
+        .build(enclave_rpc_url)?;
+
+    Ok(client.request::<String, [(); 0]>("enclave_signerPublicKey", []).await?)
+}