fix(uptime): in ci, generate and upload debug symbols to sentry, per project/org (#488)

Co-authored-by: getsantry[bot] <66042841+getsantry[bot]@users.noreply.github.com>

Author: klochek

.github/workflows/image.yml

@@ -113,3 +113,21 @@ jobs:
           google_ar_image_name: us-central1-docker.pkg.dev/sentryio/uptime-checker/image
           google_workload_identity_provider: projects/868781662168/locations/global/workloadIdentityPools/prod-github/providers/github-oidc-pool
           google_service_account: gha-gcr-push@sac-prod-sa.iam.gserviceaccount.com
+
+      - name: Extract debug symbols
+        run: |
+          docker build \
+            --target debug-symbols \
+            --build-arg UPTIME_CHECKER_GIT_REVISION=${{ github.sha }} \
+            --output type=local,dest=./debug-out \
+            -f Dockerfile .
+
+      - name: Install sentry-cli
+        run: curl -sL https://sentry.io/get-cli/ | bash
+
+      - name: Upload debug symbols to Sentry
+        run: scripts/upload-debug-symbols ./debug-out/uptime-checker.debug
+        env:
+          SENTRY_ORGS: ${{ secrets.SENTRY_ORGS }}
+          SENTRY_PROJECTS: ${{ secrets.SENTRY_PROJECTS }}
+          SENTRY_AUTH_TOKENS: ${{ secrets.SENTRY_AUTH_TOKENS }}

Cargo.toml

@@ -74,10 +74,10 @@ rdkafka = { git = "https://github.com/fede1024/rust-rdkafka" }
 # we're using the danf/hickory-dns-nameservers branch on the reqwest-uptime fork
 
 [profile.release]
+debug = true
 lto = true
 codegen-units = 1
 panic = 'abort'
-strip = "debuginfo"
 
 [dev-dependencies]
 redis-test-macro = { path = "./redis-test-macro" }

Dockerfile

@@ -8,7 +8,8 @@ RUN apk add --no-cache \
     g++ \
     pkgconfig \
     openssl-dev \
-    protoc
+    protoc \
+    binutils
 
 # Configure cargo
 RUN mkdir -p ~/.cargo && \
@@ -38,7 +39,16 @@ ENV UPTIME_CHECKER_GIT_REVISION=$UPTIME_CHECKER_GIT_REVISION
 
 # Copy the actual source code and build
 COPY . .
-RUN cargo build --release
+
+# Do the build, and then strip off debug info into a separate .debug file
+RUN cargo build --release && \
+    objcopy --only-keep-debug target/release/uptime-checker target/release/uptime-checker.debug && \
+    objcopy --strip-debug --strip-unneeded target/release/uptime-checker && \
+    objcopy --add-gnu-debuglink target/release/uptime-checker.debug target/release/uptime-checker
+
+# Stage for extracting debug symbols in CI
+FROM scratch AS debug-symbols
+COPY --from=builder /app/target/release/uptime-checker.debug /uptime-checker.debug
 
 FROM alpine:3.22.1
 

scripts/upload-debug-symbols

@@ -0,0 +1,36 @@
+#!/bin/bash
+
+# Usage:
+#   upload-debug-symbols <debug-file>
+
+# Required environment variables (semicolon-delimited for multiple targets):
+#   SENTRY_ORGS:        e.g. "org1;org2"
+#   SENTRY_PROJECTS:    e.g. "proj1;proj2"
+#   SENTRY_AUTH_TOKENS: e.g. "token1;token2"
+set -euo pipefail
+
+DEBUG_FILE="${1:?Usage: $0 <debug-file>}"
+
+if [ ! -f "$DEBUG_FILE" ]; then
+  echo "Error: debug file not found: $DEBUG_FILE" >&2
+  exit 1
+fi
+
+IFS=';' read -ra ORGS <<< "${SENTRY_ORGS:?SENTRY_ORGS is required}"
+IFS=';' read -ra PROJECTS <<< "${SENTRY_PROJECTS:?SENTRY_PROJECTS is required}"
+IFS=';' read -ra TOKENS <<< "${SENTRY_AUTH_TOKENS:?SENTRY_AUTH_TOKENS is required}"
+
+if [ ${#ORGS[@]} -ne ${#PROJECTS[@]} ] || [ ${#ORGS[@]} -ne ${#TOKENS[@]} ]; then
+  echo "Error: SENTRY_ORGS, SENTRY_PROJECTS, and SENTRY_AUTH_TOKENS must have the same number of entries" >&2
+  exit 1
+fi
+
+for i in "${!ORGS[@]}"; do
+  echo "Uploading debug symbols to ${ORGS[$i]}/${PROJECTS[$i]}..."
+  SENTRY_ORG="${ORGS[$i]}" \
+  SENTRY_PROJECT="${PROJECTS[$i]}" \
+  SENTRY_AUTH_TOKEN="${TOKENS[$i]}" \
+    sentry-cli debug-files upload "$DEBUG_FILE"
+done
+
+echo "Done."