Add multi-arch Bazel Dockerfile and remove s390x-specific Dockerfile

Signed-off-by: Matthieu MOREL <[email protected]>

Author: mmorel-35

bazel/external/Dockerfile.bazel

@@ -14,15 +14,20 @@
 # limitations under the License.
 
 
-# Prep:
+
+# Multi-arch Bazel test image for Proxy-Wasm
+#
+# Preparation:
 #   docker run --rm --privileged tonistiigi/binfmt --install all
 #   docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-#   Need to see "F" flag: cat /proc/sys/fs/binfmt_misc/qemu-*
+#   # Check for "F" flag: cat /proc/sys/fs/binfmt_misc/qemu-*
 #
-# Build:
-#   docker buildx build --platform linux/s390x -t $IMAGE -f Dockerfile.bazel
+# Build (example for s390x, amd64, arm64):
+#   docker buildx build --platform linux/s390x -t $IMAGE -f Dockerfile.bazel .
+#   docker buildx build --platform linux/amd64 -t $IMAGE -f Dockerfile.bazel .
+#   docker buildx build --platform linux/arm64 -t $IMAGE -f Dockerfile.bazel .
 #
-# Push:
+# Push (optional):
 #   docker image tag $IMAGE ghcr.io/proxy-wasm/$IMAGE
 #   docker push ghcr.io/proxy-wasm/$IMAGE
 #
@@ -32,56 +37,52 @@
 #     bazel test --verbose_failures --test_output=errors \
 #     --define engine=null --config=clang --test_timeout=1800 \
 #     -- //test/...
+#
+# Notes:
+#   - TARGETARCH and TARGETOS are set automatically by Docker buildx when using --platform.
+#   - The first stage downloads the official Bazel binary for the target platform.
 
-# Update base image
+ARG BAZEL_VERSION=7.7.1
 ARG UBUNTU_VERSION=24.04
-FROM ubuntu:${UBUNTU_VERSION} AS build
-
-# Use bash for all RUN instructions
-SHELL ["/bin/bash", "-c"]
 
-# Consolidated system update/upgrade and autoremove
+# Stage 1: build Bazel from release for the target platform
+FROM ubuntu:${UBUNTU_VERSION} AS bazel-builder
+WORKDIR /tmp
+ARG BAZEL_VERSION
+ARG TARGETARCH
+ARG TARGETOS
+ARG DEPS_BUILDER="\
+        ca-certificates \
+        curl \
+        unzip \
+        wget\
+"
 RUN apt-get update && \
-    apt-get upgrade -y && \
-    apt-get autoremove -y && \
-    rm -rf /var/lib/apt/lists/*
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends $DEPS_BUILDER openjdk-21-jdk build-essential python3 zip && \
+    wget -O /tmp/bazel-dist.zip https://github.com/bazelbuild/bazel/releases/download/${BAZEL_VERSION}/bazel-${BAZEL_VERSION}-dist.zip && \
+    mkdir -p /tmp/bazel-src && \
+    unzip /tmp/bazel-dist.zip -d /tmp/bazel-src && \
+    cd /tmp/bazel-src && \
+    EXTRA_BAZEL_ARGS="--tool_java_runtime_version=local_jdk" bash ./compile.sh && \
+    cp /tmp/bazel-src/output/bazel /tmp/bazel && \
+    chmod +x /tmp/bazel && \
+    rm -rf /tmp/bazel-dist.zip /tmp/bazel-src
 
-## All build dependencies for Bazel and ProxyWasm are listed in DEPS for clarity and maintainability.
-ARG DEPS="\
-    build-essential \
-    clang \
-    curl \
-    git \
-    libssl-dev \
-    libstdc++6 \
-    libz-dev \
-    openjdk-21-jdk \
-    python3 \
-    unzip \
-    zip\
+# Stage 2: minimal runtime for executing tests
+FROM ubuntu:${UBUNTU_VERSION} AS test-runtime
+ARG DEPS_RUNTIME="\
+        ca-certificates \
+        openjdk-21-jre-headless \
+        python3 \
+        unzip \
+        zip\
 "
-# Install all build dependencies (no PPA needed on Ubuntu 24.04)
 RUN apt-get update && \
-    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends $DEPS && \
-    rm -rf /var/lib/apt/lists/*
-
-# Set working directory for Bazel build
-WORKDIR /root/bazel
-
-
-# Download Bazel source and remove zip immediately after extraction
-ARG BAZEL_VERSION=7.7.1
-RUN curl -LO https://github.com/bazelbuild/bazel/releases/download/${BAZEL_VERSION}/bazel-${BAZEL_VERSION}-dist.zip && \
-    unzip -q bazel-${BAZEL_VERSION}-dist.zip && \
-    rm -f bazel-${BAZEL_VERSION}-dist.zip
+        DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends $DEPS_RUNTIME && \
+        rm -rf /var/lib/apt/lists/*
 
-## Build Bazel and copy the binary
-# NOTE: This step is flaky and may hang for multiarch/buildx.
-# If it takes more than 2 hours, restart the Docker build.
-ENV EXTRA_BAZEL_ARGS="--tool_java_runtime_version=local_jdk"
-RUN ./compile.sh && \
-    mv /output/bazel /usr/bin/bazel && \
-    rm -rf /root/bazel
+# Copy Bazel binary from builder
+COPY --from=bazel-builder /tmp/bazel /usr/local/bin/bazel
 
-# Ensure a valid working directory after build
+# Set a valid working directory
 WORKDIR /root