ci: add Docker workflow for amd64/arm64 build and GHCR publish

.github/workflows/ci.yml

@@ -25,14 +25,18 @@ jobs:
     steps:
       - name: Checkout leanSpec
         uses: actions/checkout@v4
-
-      - name: Install uv and Python ${{ matrix.python-version }}
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install uv
         uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
-          python-version: ${{ matrix.python-version }}
-
+
       - name: Run all quality checks via tox
         run: uvx tox -e all-checks
 
@@ -47,14 +51,18 @@ jobs:
     steps:
       - name: Checkout leanSpec
         uses: actions/checkout@v4
-
-      - name: Install uv and Python ${{ matrix.python-version }}
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install uv
         uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
-          python-version: ${{ matrix.python-version }}
-
+
       - name: Run tests via tox
         run: uvx tox -e pytest
 
@@ -65,12 +73,16 @@ jobs:
       - name: Checkout leanSpec
         uses: actions/checkout@v4
 
-      - name: Install uv and Python 3.14
+      - name: Set up Python 3.14
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.14"
+
+      - name: Install uv
         uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
-          python-version: "3.14"
 
       - name: Sync dependencies
         run: uv sync --no-progress
@@ -86,12 +98,16 @@ jobs:
       - name: Checkout leanSpec
         uses: actions/checkout@v4
 
-      - name: Install uv and Python 3.12
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install uv
         uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
-          python-version: "3.12"
 
       - name: Run interop tests
         run: |

.github/workflows/docker.yml

@@ -0,0 +1,48 @@
+name: Docker
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  packages: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  docker:
+    name: Build Docker image (amd64 + arm64)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          target: node
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+          tags: ghcr.io/leanethereum/leanspec-node:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/prod-vectors.yml

@@ -15,12 +15,16 @@ jobs:
       - name: Checkout leanSpec
         uses: actions/checkout@v4
 
-      - name: Install uv and Python 3.14
+      - name: Set up Python 3.14
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.14"
+
+      - name: Install uv
         uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
           cache-dependency-glob: "pyproject.toml"
-          python-version: "3.14"
 
       - name: Sync dependencies
         run: uv sync --no-progress

src/lean_spec/subspecs/api/server.py

@@ -113,10 +113,14 @@ async def run(self) -> None:
             await asyncio.sleep(1)
 
     def stop(self) -> None:
-        """Request graceful shutdown."""
+        """Request graceful shutdown (fire-and-forget). Prefer aclose() in async code."""
         if self._runner is not None:
             asyncio.create_task(self._async_stop())
 
+    async def aclose(self) -> None:
+        """Gracefully stop the server. Await this in async code for clean shutdown."""
+        await self._async_stop()
+
     async def _async_stop(self) -> None:
         """Gracefully stop the server."""
         if self._runner:

tests/api/conftest.py

@@ -53,10 +53,21 @@ def _create_server(self) -> ApiServer:
         return ApiServer(config=config, store_getter=lambda: store)
 
     def stop(self) -> None:
-        """Stop the server and event loop."""
+        """Stop the server and event loop, awaiting cleanup so _async_stop is run."""
         if self.server and self.loop:
-            self.loop.call_soon_threadsafe(self.server.stop)
-            self.loop.call_soon_threadsafe(self.loop.stop)
+
+            async def shutdown() -> None:
+                if self.server:
+                    await self.server.aclose()
+                if self.loop and self.loop.is_running():
+                    self.loop.stop()
+
+            future = asyncio.run_coroutine_threadsafe(shutdown(), self.loop)
+            try:
+                future.result(timeout=5.0)
+            except TimeoutError:
+                if self.loop and self.loop.is_running():
+                    self.loop.call_soon_threadsafe(self.loop.stop)
 
 
 def _wait_for_server(url: str, timeout: float = 5.0) -> bool:

tests/lean_spec/subspecs/api/test_server.py

@@ -11,8 +11,6 @@
 
 from __future__ import annotations
 
-import asyncio
-
 import httpx
 
 from lean_spec.subspecs.api import ApiServer, ApiServerConfig
@@ -79,8 +77,7 @@ async def test_returns_503_when_store_not_initialized(self) -> None:
                 assert response.status_code == 503
 
         finally:
-            server.stop()
-            await asyncio.sleep(0.1)
+            await server.aclose()
 
 
 class TestJustifiedCheckpointEndpoint:
@@ -100,5 +97,4 @@ async def test_returns_503_when_store_not_initialized(self) -> None:
                 assert response.status_code == 503
 
         finally:
-            server.stop()
-            await asyncio.sleep(0.1)
+            await server.aclose()

tests/lean_spec/subspecs/networking/gossipsub/integration/conftest.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import asyncio
 from collections.abc import AsyncGenerator
 
 import pytest
@@ -44,7 +45,10 @@ async def network() -> AsyncGenerator[GossipsubTestNetwork]:
     """
     net = GossipsubTestNetwork()
     yield net
-    await net.stop_all()
+    try:
+        await asyncio.wait_for(net.stop_all(), timeout=10.0)
+    except asyncio.TimeoutError:
+        pass
 
 
 @pytest.fixture

tests/lean_spec/subspecs/networking/gossipsub/integration/test_stress.py

@@ -17,6 +17,7 @@
 
 
 @pytest.mark.asyncio
+@pytest.mark.timeout(60)
 async def test_peer_churn(
     network: GossipsubTestNetwork,
 ) -> None:

tests/lean_spec/subspecs/sync/test_checkpoint_sync.py

@@ -2,7 +2,6 @@
 
 from __future__ import annotations
 
-import asyncio
 from unittest.mock import MagicMock
 
 from lean_spec.subspecs.api import ApiServer, ApiServerConfig
@@ -77,5 +76,4 @@ async def test_client_fetches_and_deserializes_state(self, base_store: Store) ->
             assert is_valid is True
 
         finally:
-            server.stop()
-            await asyncio.sleep(0.1)
+            await server.aclose()