shadow/docker-compose.yml at main · uutils/shadow · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
# Usage:
#   docker compose run --rm debian          # shell on Debian Trixie
#   docker compose run --rm debian cargo test
#   docker compose run --rm alpine cargo test
#   docker compose run --rm fedora cargo test
#   docker compose up --build               # build all images
#   docker compose run --rm e2e              # end-to-end deployment tests
#   docker compose run --rm e2e bash         # debug e2e interactively
#
# The cargo registry cache is shared across Debian/Alpine (same CARGO_HOME path).
# Fedora uses a separate cache (rustup installs to /root/.cargo).
# Each distro gets its own target dir (different libc/toolchain = different binaries).

x-common: &common
  working_dir: /workspace
  security_opt:
    - seccomp:unconfined
  cap_add:
    - SYS_ADMIN

services:
  debian:
    <<: *common
    build:
      context: .
      dockerfile: docker/Dockerfile.debian
    volumes:
      - .:/workspace
      - cargo-cache:/usr/local/cargo/registry
      - target-debian:/workspace/target

  alpine:
    <<: *common
    build:
      context: .
      dockerfile: docker/Dockerfile.alpine
    volumes:
      - .:/workspace
      - cargo-cache:/usr/local/cargo/registry
      - target-alpine:/workspace/target

  fedora:
    <<: *common
    build:
      context: .
      dockerfile: docker/Dockerfile.fedora
    volumes:
      - .:/workspace
      - cargo-cache-fedora:/root/.cargo/registry
      - target-fedora:/workspace/target

  # End-to-end deployment test — self-contained, no shared volumes.
  # Builds shadow-rs from source, installs system-wide, runs ~100 assertions.
  e2e:
    build:
      context: .
      dockerfile: docker/Dockerfile.e2e
    security_opt:
      - seccomp:unconfined
      - "no-new-privileges:false"
    cap_add:
      - SYS_ADMIN
    tmpfs:
      - /tmp

volumes:
  cargo-cache:
  cargo-cache-fedora:
  target-debian:
  target-alpine:
  target-fedora: