build: adding static binaries and release for castai

Author: mnitchev

.github/workflows/release.yml

@@ -0,0 +1,50 @@
+name: Publish GitHub Release
+
+on:
+  push:
+    tags:
+      - '*'
+  workflow_dispatch:
+
+permissions:
+  packages: write
+  contents: read
+
+jobs:
+  build-and-publish-kind-image:
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v3
+
+      - name: Create multi architecture builder
+        run: |
+          docker buildx create --name multi-arch --platform "linux/arm64,linux/amd64" --driver "docker-container"
+          docker buildx ls --no-trunc
+
+      - name: Build amd64 with Docker
+        run: docker buildx build --builder multi-arch --platform linux/amd64 -f release/Dockerfile --output amd64-bins .
+
+      - name: Build arm64 with Docker
+        run: docker buildx build --builder multi-arch --platform linux/arm64 -f release/Dockerfile --output arm64-bins .
+
+      - name: List built binaries
+        run: ls -lah amd64-bins arm64-bins
+
+      - name: Create tar
+        run: |
+          tar -czf criu-${{ github.ref_name}}-linux-amd64.tar.gz -C amd64-bins criu
+          tar -czf criu-${{ github.ref_name}}-linux-arm64.tar.gz -C arm64-bins criu
+          sha256sum criu-${{ github.ref_name}}-linux-amd64.tar.gz >> SHA256SUMS
+          sha256sum criu-${{ github.ref_name}}-linux-arm64.tar.gz >> SHA256SUMS
+
+      - name: Upload Release Asset
+        uses: ncipollo/release-action@v1
+        with:
+          artifacts: "criu-${{ github.ref_name}}-linux-amd64.tar.gz,criu-${{ github.ref_name}}-linux-arm64.tar.gz,SHA256SUMS"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+

criu/Makefile

@@ -1,3 +1,6 @@
+LDFLAGS         += -static
+WRAPFLAGS       += -Wl,--wrap=__strlcpy
+
 # here is a workaround for a bug in libnl-3:
 # 6a8d90f5fec4 "attr: Allow attribute type 0"
 WRAPFLAGS		+= -Wl,--wrap=nla_parse,--wrap=nlmsg_parse

criu/string.c

@@ -17,7 +17,7 @@
  * of course, the buffer size is zero). It does not pad
  * out the result like strncpy() does.
  */
-size_t __strlcpy(char *dest, const char *src, size_t size)
+size_t __wrap___strlcpy(char *dest, const char *src, size_t size)
 {
 	size_t ret = strlen(src);
 

release/Dockerfile

@@ -0,0 +1,34 @@
+FROM ubuntu:24.04 AS build
+
+RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install -y \
+	libnet-dev \
+	libnl-route-3-dev \
+	gcc \
+	bsdmainutils \
+	build-essential \
+	git-core \
+	iptables \
+	libaio-dev \
+	libbsd-dev \
+	libcap-dev \
+	libnl-3-dev \
+	libprotobuf-c-dev \
+	libprotobuf-dev \
+	libselinux-dev \
+	libpcre2-dev \
+	iproute2 \
+	kmod \
+	pkg-config \
+	protobuf-c-compiler \
+	protobuf-compiler \
+	python3-minimal \
+	python3-protobuf \
+	uuid-dev \
+	python3-yaml
+
+COPY . /work
+WORKDIR /work
+RUN make -j $(nproc) criu
+
+FROM scratch
+COPY --from=build /work/criu/criu .