static builder

Dockerfile.builder

@@ -0,0 +1,72 @@
+# syntax=docker/dockerfile:1
+
+ARG GO_VERSION="1.20.0"
+ARG RUNNER_IMAGE="gcr.io/distroless/static"
+
+# --------------------------------------------------------
+# Builder
+# --------------------------------------------------------
+
+FROM golang:${GO_VERSION}-alpine as builder
+
+ARG GIT_VERSION
+ARG GIT_COMMIT
+ARG BUILD_TAGS
+ARG ENABLED_PROPOSALS
+
+RUN apk add --no-cache \
+    ca-certificates \
+    build-base \
+    linux-headers
+
+# Download go dependencies
+WORKDIR /neutron
+COPY go.mod go.sum ./
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/root/go/pkg/mod \
+    go mod download
+
+# Cosmwasm - Download correct libwasmvm version
+RUN WASMVM_VERSION=$(go list -m github.com/CosmWasm/wasmvm | cut -d ' ' -f 2) && \
+    wget https://github.com/CosmWasm/wasmvm/releases/download/$WASMVM_VERSION/libwasmvm_muslc.$(uname -m).a \
+      -O /lib/libwasmvm_muslc.a && \
+    # verify checksum
+    wget https://github.com/CosmWasm/wasmvm/releases/download/$WASMVM_VERSION/checksums.txt -O /tmp/checksums.txt && \
+    sha256sum /lib/libwasmvm_muslc.a | grep $(cat /tmp/checksums.txt | grep libwasmvm_muslc.$(uname -m) | cut -d ' ' -f 1)
+
+# Copy the remaining files
+COPY . .
+
+# Build neutrond binary
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/root/go/pkg/mod \
+    go build \
+      -mod=readonly \
+      -tags "netgo,ledger,muslc" \
+      -ldflags "-X github.com/cosmos/cosmos-sdk/version.Name="neutron" \
+              -X github.com/cosmos/cosmos-sdk/version.AppName="neutrond" \
+              -X github.com/cosmos/cosmos-sdk/version.Version=${GIT_VERSION} \
+              -X github.com/cosmos/cosmos-sdk/version.Commit=${GIT_COMMIT} \
+              -X github.com/cosmos/cosmos-sdk/version.BuildTags='${BUILD_TAGS}' \
+              -X github.com/neutron-org/neutron/app.EnableSpecificProposals=${ENABLED_PROPOSALS} \
+              -w -s -linkmode=external -extldflags '-Wl,-z,muldefs -static'" \
+      -trimpath \
+      -o /neutron/build/neutrond \
+      /neutron/cmd/neutrond
+
+# --------------------------------------------------------
+# Runner
+# --------------------------------------------------------
+
+FROM ${RUNNER_IMAGE}
+
+COPY --from=builder /neutron/build/neutrond /bin/neutrond
+
+ENV HOME /neutron
+WORKDIR $HOME
+
+EXPOSE 26656
+EXPOSE 26657
+EXPOSE 1317
+
+ENTRYPOINT ["neutrond"]

Makefile

@@ -7,6 +7,9 @@ LEDGER_ENABLED ?= true
 SDK_PACK := $(shell go list -m github.com/cosmos/cosmos-sdk | sed  's/ /\@/g')
 BINDIR ?= $(GOPATH)/bin
 SIMAPP = ./app
+ENABLED_PROPOSALS := SudoContract,UpdateAdmin,ClearAdmin,PinCodes,UnpinCodes
+GO_VERSION=1.20.0
+BUILDDIR ?= $(CURDIR)/build
 
 # for dockerized protobuf tools
 DOCKER := $(shell which docker)
@@ -61,7 +64,7 @@ ldflags = -X github.com/cosmos/cosmos-sdk/version.Name=neutron \
 		  -X github.com/cosmos/cosmos-sdk/version.Version=$(VERSION) \
 		  -X github.com/cosmos/cosmos-sdk/version.Commit=$(COMMIT) \
 		  -X "github.com/cosmos/cosmos-sdk/version.BuildTags=$(build_tags_comma_sep)" \
-		  -X "github.com/neutron-org/neutron/app.EnableSpecificProposals=MigrateContract,SudoContract,UpdateAdmin,ClearAdmin,PinCodes,UnpinCodes"
+		  -X "github.com/neutron-org/neutron/app.EnableSpecificProposals=$(ENABLED_PROPOSALS)"
 
 ifeq ($(WITH_CLEVELDB),yes)
   ldflags += -X github.com/cosmos/cosmos-sdk/types.DBBackend=cleveldb
@@ -89,6 +92,24 @@ else
 	go build -mod=readonly $(BUILD_FLAGS) -o build/neutrond ./cmd/neutrond
 endif
 
+build-static-linux-amd64: go.sum $(BUILDDIR)/
+	$(DOCKER) buildx create --name neutronbuilder || true
+	$(DOCKER) buildx use neutronbuilder
+	$(DOCKER) buildx build \
+		--build-arg GO_VERSION=$(GO_VERSION) \
+		--build-arg GIT_VERSION=$(VERSION) \
+		--build-arg GIT_COMMIT=$(COMMIT) \
+		--build-arg BUILD_TAGS=$(build_tags_comma_sep) \
+		--build-arg ENABLED_PROPOSALS=$(ENABLED_PROPOSALS) \
+		--platform linux/amd64 \
+		-t neutron-amd64 \
+		--load \
+		-f Dockerfile.builder .
+	$(DOCKER) rm -f neutronbinary || true
+	$(DOCKER) create -ti --name neutronbinary neutron-amd64
+	$(DOCKER) cp neutronbinary:/bin/neutrond $(BUILDDIR)/neutrond-linux-amd64
+	$(DOCKER) rm -f neutronbinary
+
 install: check_version go.sum
 	go install -mod=readonly $(BUILD_FLAGS) ./cmd/neutrond