Add Docker Images

.github/docker/docker-bake.hcl

@@ -0,0 +1,74 @@
+variable "SERVER_VERSION" {
+  default = "1.29.1"
+}
+
+variable "CLI_VERSION" {
+  default = "1.5.0"
+}
+
+variable "IMAGE_REPO" {
+  default = "temporaliotest"
+}
+
+variable "IMAGE_SHA_TAG" {}
+
+variable "IMAGE_BRANCH_TAG" {}
+
+variable "SAFE_IMAGE_BRANCH_TAG" {
+  default = join("-", [for c in regexall("[a-z0-9]+", lower(IMAGE_BRANCH_TAG)) : c])
+}
+
+variable "TEMPORAL_SHA" {
+  default = ""
+}
+
+variable "TAG_LATEST" {
+  default = false
+}
+
+# Legacy targets (legacy-admin-tools, legacy-server) are for building images with server versions
+# older than v1.27.0 (3 minor versions behind v1.30.0). Once support for pre-1.27.0 versions is
+# no longer needed, these legacy targets can be removed and only the standard targets should be used.
+
+target "admin-tools" {
+  dockerfile = "targets/admin-tools.Dockerfile"
+  tags = compact([
+    "${IMAGE_REPO}/admin-tools:${IMAGE_SHA_TAG}",
+    "${IMAGE_REPO}/admin-tools:${SAFE_IMAGE_BRANCH_TAG}",
+    TAG_LATEST ? "${IMAGE_REPO}/admin-tools:latest" : "",
+  ])
+  platforms = ["linux/amd64", "linux/arm64"]
+  labels = {
+    "org.opencontainers.image.title" = "admin-tools"
+    "org.opencontainers.image.description" = "Temporal admin tools"
+    "org.opencontainers.image.url" = "https://github.com/temporalio/temporal"
+    "org.opencontainers.image.source" = "https://github.com/temporalio/temporal"
+    "org.opencontainers.image.licenses" = "MIT"
+    "org.opencontainers.image.version" = "${SERVER_VERSION}"
+    "org.opencontainers.image.revision" = "${TEMPORAL_SHA}"
+    "org.opencontainers.image.created" = timestamp()
+    "com.temporal.server.version" = "${SERVER_VERSION}"
+    "com.temporal.cli.version" = "${CLI_VERSION}"
+  }
+}
+
+target "server" {
+  dockerfile = "targets/server.Dockerfile"
+  tags = compact([
+    "${IMAGE_REPO}/server:${IMAGE_SHA_TAG}",
+    "${IMAGE_REPO}/server:${SAFE_IMAGE_BRANCH_TAG}",
+    TAG_LATEST ? "${IMAGE_REPO}/server:latest" : "",
+  ])
+  platforms = ["linux/amd64", "linux/arm64"]
+  labels = {
+    "org.opencontainers.image.title" = "server"
+    "org.opencontainers.image.description" = "Temporal Server"
+    "org.opencontainers.image.url" = "https://github.com/temporalio/temporal"
+    "org.opencontainers.image.source" = "https://github.com/temporalio/temporal"
+    "org.opencontainers.image.licenses" = "MIT"
+    "org.opencontainers.image.version" = "${SERVER_VERSION}"
+    "org.opencontainers.image.revision" = "${TEMPORAL_SHA}"
+    "org.opencontainers.image.created" = timestamp()
+    "com.temporal.server.version" = "${SERVER_VERSION}"
+  }
+}

.github/docker/scripts/sh/entrypoint.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+# pipefail is included in alpine
+# shellcheck disable=SC3040
+set -eu -o pipefail
+
+# Resolve hostname to IP address for binding if not already set (supports both IPv4 and IPv6)
+: "${BIND_ON_IP:=$(getent hosts "$(hostname)" | awk '{print $1;}')}"
+export BIND_ON_IP
+
+# If binding to wildcard address (0.0.0.0 or ::0), set broadcast address if not already set
+if [ "${BIND_ON_IP}" = "0.0.0.0" ] || [ "${BIND_ON_IP}" = "::0" ]; then
+    : "${TEMPORAL_BROADCAST_ADDRESS:=$(getent hosts "$(hostname)" | awk '{print $1;}')}"
+    export TEMPORAL_BROADCAST_ADDRESS
+fi
+
+exec temporal-server start 

.github/docker/targets/admin-tools.Dockerfile

@@ -0,0 +1,23 @@
+FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+
+ARG TARGETARCH
+
+RUN apk add --no-cache \
+    ca-certificates \
+    tzdata && addgroup -g 1000 temporal && \
+    adduser -u 1000 -G temporal -D temporal
+
+# Copy all admin tool binaries:
+# - temporal (CLI)
+# - temporal-server
+# - temporal-cassandra-tool
+# - temporal-sql-tool
+# - temporal-elasticsearch-tool
+# - tdbg
+COPY --chmod=755 ./build/${TARGETARCH}/* /usr/local/bin/
+
+COPY ./build/temporal/schema /etc/temporal/schema
+
+USER temporal
+
+CMD ["sh", "-c", "trap exit INT HUP TERM; sleep infinity"]

.github/docker/targets/server.Dockerfile

@@ -0,0 +1,16 @@
+FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+
+ARG TARGETARCH
+
+RUN apk add --no-cache \
+    ca-certificates \
+    tzdata && addgroup -g 1000 temporal && \
+    adduser -u 1000 -G temporal -D temporal
+
+COPY --chmod=755 ./build/${TARGETARCH}/temporal-server /usr/local/bin/
+COPY --chmod=755 ./scripts/sh/entrypoint.sh /etc/temporal/entrypoint.sh
+
+WORKDIR /etc/temporal
+USER temporal
+
+CMD [ "/etc/temporal/entrypoint.sh" ]