solstice-ci/deploy/images/orchestrator/Containerfile

# syntax=docker/dockerfile:1.7
# Solstice Orchestrator container
# Uses vm-manager (direct QEMU) instead of libvirt — only needs /dev/kvm at runtime
#
# Pre-build the binary, then build the container:
#   cargo build --release -p orchestrator
#   docker build -f deploy/images/orchestrator/Containerfile -t local/solstice-orchestrator:latest .

FROM docker.io/library/ubuntu:24.04
# Runtime: QEMU for VMs, qemu-utils for qemu-img, DB client libs
RUN apt-get update \
 && apt-get install -y --no-install-recommends \
    libsqlite3-0 libpq5 ca-certificates \
    qemu-system-x86 qemu-utils \
 && rm -rf /var/lib/apt/lists/*
COPY target/release/orchestrator /usr/local/bin/solstice-orchestrator
RUN chmod +x /usr/local/bin/solstice-orchestrator
EXPOSE 8081
ENTRYPOINT ["/usr/local/bin/solstice-orchestrator"]
Add Podman Compose deployment stack with Traefik and services integration This commit introduces: - A production-ready Podman Compose stack using Traefik as a reverse proxy with Let's Encrypt integration. - Per-environment logical separation for Postgres, RabbitMQ, and MinIO services. - New deployment utilities, including a `.env.sample` template, `compose.yml`, and setup scripts for MinIO and Postgres. - Updates to `github-integration` HTTP server with basic webhook handling using `axum` and configurable paths. - Adjustments to packaging tasks for better tarball generation via `git archive`. - Expanded dependencies for `PKGBUILD` to support SQLite and PostgreSQL libraries. - Containerfiles for orchestrator and integration services to enable Rust multi-stage builds without sccache. This enables simplified and secure CI deployments with automatic routing, TLS, and volume persistence. 2025-11-08 20:21:57 +00:00			`# syntax=docker/dockerfile:1.7`
Fix orchestrator container: pre-built binary + Ubuntu 24.04 base Switch to pre-built binary Containerfile to avoid workspace dependency issues with vm-manager path dep. Use Ubuntu 24.04 to match host glibc. 2026-04-07 16:50:55 +02:00			`# Solstice Orchestrator container`
Update orchestrator Containerfile: drop libvirt, add QEMU - Remove libvirt-dev from build stage, libvirt-clients/libvirt0 from runtime - Remove genisoimage (vm-manager has pure-Rust ISO builder) - Add qemu-system-x86 to runtime for direct VM execution - Keep qemu-utils for qemu-img overlay creation - Remove --features libvirt from cargo build - Remove libvirt socket/config volume mounts from compose.yml - Remove LIBVIRT_URI/LIBVIRT_NETWORK env vars - Add optional NETWORK_BRIDGE env var for TAP mode - Container now only needs /dev/kvm device access 2026-04-07 15:57:10 +02:00			`# Uses vm-manager (direct QEMU) instead of libvirt — only needs /dev/kvm at runtime`
Fix orchestrator container: pre-built binary + Ubuntu 24.04 base Switch to pre-built binary Containerfile to avoid workspace dependency issues with vm-manager path dep. Use Ubuntu 24.04 to match host glibc. 2026-04-07 16:50:55 +02:00			`#`
			`# Pre-build the binary, then build the container:`
			`# cargo build --release -p orchestrator`
			`# docker build -f deploy/images/orchestrator/Containerfile -t local/solstice-orchestrator:latest .`
Add Podman Compose deployment stack with Traefik and services integration This commit introduces: - A production-ready Podman Compose stack using Traefik as a reverse proxy with Let's Encrypt integration. - Per-environment logical separation for Postgres, RabbitMQ, and MinIO services. - New deployment utilities, including a `.env.sample` template, `compose.yml`, and setup scripts for MinIO and Postgres. - Updates to `github-integration` HTTP server with basic webhook handling using `axum` and configurable paths. - Adjustments to packaging tasks for better tarball generation via `git archive`. - Expanded dependencies for `PKGBUILD` to support SQLite and PostgreSQL libraries. - Containerfiles for orchestrator and integration services to enable Rust multi-stage builds without sccache. This enables simplified and secure CI deployments with automatic routing, TLS, and volume persistence. 2025-11-08 20:21:57 +00:00
Fix orchestrator container: pre-built binary + Ubuntu 24.04 base Switch to pre-built binary Containerfile to avoid workspace dependency issues with vm-manager path dep. Use Ubuntu 24.04 to match host glibc. 2026-04-07 16:50:55 +02:00			`FROM docker.io/library/ubuntu:24.04`
Update orchestrator Containerfile: drop libvirt, add QEMU - Remove libvirt-dev from build stage, libvirt-clients/libvirt0 from runtime - Remove genisoimage (vm-manager has pure-Rust ISO builder) - Add qemu-system-x86 to runtime for direct VM execution - Keep qemu-utils for qemu-img overlay creation - Remove --features libvirt from cargo build - Remove libvirt socket/config volume mounts from compose.yml - Remove LIBVIRT_URI/LIBVIRT_NETWORK env vars - Add optional NETWORK_BRIDGE env var for TAP mode - Container now only needs /dev/kvm device access 2026-04-07 15:57:10 +02:00			`# Runtime: QEMU for VMs, qemu-utils for qemu-img, DB client libs`
Add Podman Compose deployment stack with Traefik and services integration This commit introduces: - A production-ready Podman Compose stack using Traefik as a reverse proxy with Let's Encrypt integration. - Per-environment logical separation for Postgres, RabbitMQ, and MinIO services. - New deployment utilities, including a `.env.sample` template, `compose.yml`, and setup scripts for MinIO and Postgres. - Updates to `github-integration` HTTP server with basic webhook handling using `axum` and configurable paths. - Adjustments to packaging tasks for better tarball generation via `git archive`. - Expanded dependencies for `PKGBUILD` to support SQLite and PostgreSQL libraries. - Containerfiles for orchestrator and integration services to enable Rust multi-stage builds without sccache. This enables simplified and secure CI deployments with automatic routing, TLS, and volume persistence. 2025-11-08 20:21:57 +00:00			`RUN apt-get update \`
Add libvirt/KVM integration and Forgejo webhook support to Podman stack - Extend `.env.sample` with libvirt configuration, Forgejo secrets, and image mapping defaults. - Update `compose.yml` to enable libvirt integration, including required mounts, devices, and environment variables. - Add Forgejo webhook configuration and commit status reporting with optional HMAC validation. - Enhance the orchestrator container with libvirt dependencies and optional features for VM management. - Document host preparation for libvirt/KVM and image directories in the README. - Set default fallback values for Traefik ACME CA server. Signed-off-by: Till Wegmueller <toasterson@gmail.com> 2025-11-09 17:58:36 +01:00			`&& apt-get install -y --no-install-recommends \`
			`libsqlite3-0 libpq5 ca-certificates \`
Update orchestrator Containerfile: drop libvirt, add QEMU - Remove libvirt-dev from build stage, libvirt-clients/libvirt0 from runtime - Remove genisoimage (vm-manager has pure-Rust ISO builder) - Add qemu-system-x86 to runtime for direct VM execution - Keep qemu-utils for qemu-img overlay creation - Remove --features libvirt from cargo build - Remove libvirt socket/config volume mounts from compose.yml - Remove LIBVIRT_URI/LIBVIRT_NETWORK env vars - Add optional NETWORK_BRIDGE env var for TAP mode - Container now only needs /dev/kvm device access 2026-04-07 15:57:10 +02:00			`qemu-system-x86 qemu-utils \`
Add Podman Compose deployment stack with Traefik and services integration This commit introduces: - A production-ready Podman Compose stack using Traefik as a reverse proxy with Let's Encrypt integration. - Per-environment logical separation for Postgres, RabbitMQ, and MinIO services. - New deployment utilities, including a `.env.sample` template, `compose.yml`, and setup scripts for MinIO and Postgres. - Updates to `github-integration` HTTP server with basic webhook handling using `axum` and configurable paths. - Adjustments to packaging tasks for better tarball generation via `git archive`. - Expanded dependencies for `PKGBUILD` to support SQLite and PostgreSQL libraries. - Containerfiles for orchestrator and integration services to enable Rust multi-stage builds without sccache. This enables simplified and secure CI deployments with automatic routing, TLS, and volume persistence. 2025-11-08 20:21:57 +00:00			`&& rm -rf /var/lib/apt/lists/*`
Fix orchestrator container: pre-built binary + Ubuntu 24.04 base Switch to pre-built binary Containerfile to avoid workspace dependency issues with vm-manager path dep. Use Ubuntu 24.04 to match host glibc. 2026-04-07 16:50:55 +02:00			`COPY target/release/orchestrator /usr/local/bin/solstice-orchestrator`
			`RUN chmod +x /usr/local/bin/solstice-orchestrator`
Update orchestrator Containerfile: drop libvirt, add QEMU - Remove libvirt-dev from build stage, libvirt-clients/libvirt0 from runtime - Remove genisoimage (vm-manager has pure-Rust ISO builder) - Add qemu-system-x86 to runtime for direct VM execution - Keep qemu-utils for qemu-img overlay creation - Remove --features libvirt from cargo build - Remove libvirt socket/config volume mounts from compose.yml - Remove LIBVIRT_URI/LIBVIRT_NETWORK env vars - Add optional NETWORK_BRIDGE env var for TAP mode - Container now only needs /dev/kvm device access 2026-04-07 15:57:10 +02:00			`EXPOSE 8081`
Fix orchestrator container: pre-built binary + Ubuntu 24.04 base Switch to pre-built binary Containerfile to avoid workspace dependency issues with vm-manager path dep. Use Ubuntu 24.04 to match host glibc. 2026-04-07 16:50:55 +02:00			`ENTRYPOINT ["/usr/local/bin/solstice-orchestrator"]`