Merge pull request #56 from nao1215/refactor/comprehensive-improvements-2

Release v0.6.2: fix aarch64 cross-build, release profile, test coverage

Author: nao1215

CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## v0.6.2
+
+### Fixed
+
+- aarch64 cross-compilation failure: `Cross.toml` pre-build now installs `libssl-dev:arm64` instead of the host-architecture package, so `openssl-sys` finds the correct headers.
+
+### Changed
+
+- Release profile: enable thin LTO, single codegen unit, and binary stripping for smaller, faster binaries.
+- Unified `stderr_write` usage across S3, GCS, and Azure backends to avoid Rust 2024 `ReentrantLock` issues with `eprintln!`.
+- Cache key computation uses streaming `Sha256` hasher and inline parameter builder, eliminating intermediate allocations and sort.
+- Watermark margin capped at 9999 with explicit validation on both JSON and multipart endpoints.
+- Docker Compose healthcheck added for the `truss` service.
+
+### Added
+
+- Unit tests for `auth`, `http_parse`, `multipart`, `negotiate`, and `response` modules (314 new tests).
+
 ## v0.6.1
 
 ### Fixed

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "truss-image"
-version = "0.6.1"
+version = "0.6.2"
 edition = "2024"
 description = "Image toolkit with a shared Rust core across the CLI, HTTP server, and WASM demo."
 license = "MIT"
@@ -61,6 +61,11 @@ azure_storage_blob = { version = "0.9", optional = true }
 azure_core = { version = "0.32", optional = true }
 futures = { version = "0.3", optional = true }
 
+[profile.release]
+lto = "thin"
+codegen-units = 1
+strip = true
+
 [dev-dependencies]
 aws-smithy-runtime-api = "1"
 aws-smithy-types = "1"

Cargo.toml

@@ -1,4 +1,4 @@
 [target.aarch64-unknown-linux-gnu]
 pre-build = [
-    "apt-get update && apt-get install -y libssl-dev",
+    "dpkg --add-architecture arm64 && apt-get update && apt-get install -y libssl-dev:arm64",
 ]

Cross.toml

@@ -11,6 +11,11 @@ services:
       # - TRUSS_TRANSFORM_DEADLINE_SECS=30
     volumes:
       - ./images:/data:ro
+    healthcheck:
+      test: ["CMD-SHELL", "printf 'GET /health/live HTTP/1.1\\r\\nHost: localhost\\r\\n\\r\\n' | nc localhost 8080 | head -1 | grep -q '200 OK'"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
     read_only: true
     security_opt:
       - no-new-privileges:true

compose.yml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: Truss Image Server API
-  version: 0.6.1
+  version: 0.6.2
   description: |
     HTTP API for the Truss image toolkit.
 
@@ -333,7 +333,7 @@ paths:
               example:
                 status: ok
                 service: truss
-                version: 0.6.1
+                version: 0.6.2
                 uptimeSeconds: 3600
                 checks:
                   - name: storageRoot
@@ -361,7 +361,7 @@ paths:
               example:
                 status: ok
                 service: truss
-                version: 0.6.1
+                version: 0.6.2
 
   /health/ready:
     get: