feat: switch to Chainguard base images for slim Docker builds

.dockerignore

@@ -12,6 +12,7 @@
 # Git
 .git
 .gitignore
+.github/
 
 # IDE
 .idea
@@ -30,3 +31,20 @@ Thumbs.db
 **/coverage
 **/.pytest_cache
 **/.mypy_cache
+
+# Directories not needed in Docker build context
+hindsight-docs/
+hindsight-cli/
+hindsight-dev/
+hindsight/
+hindsight-embed/
+hindsight-integration-tests/
+helm/
+cookbook/
+monitoring/
+scripts/
+.env
+.env.*
+
+# Keep: hindsight-api/, hindsight-clients/typescript/, hindsight-control-plane/,
+#        package.json, package-lock.json, docker/

.github/workflows/ci.yml

@@ -114,14 +114,10 @@ jobs:
         include:
           - target: api-only
             name: api-slim
-            build_args: |
-              INCLUDE_LOCAL_MODELS=false
-              PRELOAD_ML_MODELS=false
+            smoke_cmd: "import hindsight_api; import tiktoken; print('OK')"
           - target: standalone
             name: standalone-slim
-            build_args: |
-              INCLUDE_LOCAL_MODELS=false
-              PRELOAD_ML_MODELS=false
+            smoke_cmd: "import hindsight_api; import tiktoken; print('OK')"
 
     steps:
     - uses: actions/checkout@v4
@@ -135,7 +131,12 @@ jobs:
         context: .
         file: docker/standalone/Dockerfile
         target: ${{ matrix.target }}
-        build-args: ${{ matrix.build_args }}
         push: false
-        load: false
+        load: true
         tags: hindsight-${{ matrix.name }}:test
+
+    - name: Smoke test ${{ matrix.name }}
+      run: docker run --rm --entrypoint python hindsight-${{ matrix.name }}:test -c "${{ matrix.smoke_cmd }}"
+
+    - name: Show image size
+      run: docker images hindsight-${{ matrix.name }}:test --format "{{.Repository}}:{{.Tag}} {{.Size}}"

.github/workflows/release.yml

@@ -57,9 +57,6 @@ jobs:
         context: .
         file: docker/standalone/Dockerfile
         target: ${{ matrix.target }}
-        build-args: |
-          INCLUDE_LOCAL_MODELS=false
-          PRELOAD_ML_MODELS=false
         push: true
         platforms: linux/amd64
         tags: ${{ steps.meta.outputs.tags }}