[signer] Build separate pcscd service container image

Reduce the verbosity of the consuming GitHub Actions workflow by
encapsulating the healthcheck information into the pcscd service
container definition.

Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>

Author: mcb30

.github/workflows/signer.yml

@@ -17,6 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       pkgname: ipxe-signer
+      pcscdname: ipxe-signer-pcscd
       reponame: ghcr.io/${{ github.repository_owner }}
       label: ${{ github.ref_name == 'master' && 'latest' || github.ref_name }}
     steps:
@@ -42,6 +43,15 @@ jobs:
           tags: |
             ${{ env.reponame }}/${{ env.pkgname }}:draft-${{ github.sha }}
 
+      - name: Build (pcscd)
+        uses: docker/build-push-action@v6
+        with:
+          context: signer
+          target: pcscd
+          push: true
+          tags: |
+            ${{ env.reponame }}/${{ env.pcscdname }}:draft-${{ github.sha }}
+
       - name: Build (checker)
         uses: docker/build-push-action@v6
         with:
@@ -61,3 +71,9 @@ jobs:
           docker buildx imagetools create \
             --tag ${{ env.reponame }}/${{ env.pkgname }}:${{ env.label }} \
             ${{ env.reponame }}/${{ env.pkgname }}:draft-${{ github.sha }}
+
+      - name: Publish (pcscd)
+        run: |
+          docker buildx imagetools create \
+            --tag ${{ env.reponame }}/${{ env.pcscdname }}:${{ env.label }} \
+            ${{ env.reponame }}/${{ env.pcscdname }}:draft-${{ github.sha }}

signer/Dockerfile

@@ -19,12 +19,6 @@ RUN echo "install_weak_deps=False" >> /etc/dnf/dnf.conf \
 	syslinux \
     && dnf clean all -y
 
-COPY entrypoint.sh /bin/entrypoint.sh
-
-ENTRYPOINT [ "/bin/entrypoint.sh" ]
-
-CMD [ "/bin/sh" ]
-
 FROM signer AS check-signer
 
 RUN dnf install -y \
@@ -41,6 +35,17 @@ ADD https://github.com/ipxe/ipxe.git /ipxe
 CMD /ipxe/src/util/genfsimg -o dummy.iso dummy.lkrn dummy.efi && \
     iso-info dummy.iso
 
+#
+# Service container for pcscd
+#
+
+FROM signer AS pcscd
+
+CMD rm -f /run/pcscd/pcscd.comm ; \
+    /usr/bin/pcscd --foreground --disable-polkit
+
+HEALTHCHECK --interval=3s --timeout=5s CMD pcscd --hotplug
+
 #
 # Specify the default target
 #