chore: add gha caching to CI (#756)

Also removed a redundant development cargo build call that didn't result
in any build optimizations.

Author: topocount

.github/workflows/docker-build.yml

@@ -0,0 +1,40 @@
+name: Docker Build
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: docker-build-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    timeout-minutes: 30
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            runner: ubuntu-latest
+          - arch: arm64
+            runner: ubuntu-24.04-arm
+    runs-on: ${{ matrix.runner }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: docker/setup-buildx-action@v3
+
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/${{ matrix.arch }}
+          push: false
+          cache-from: type=gha,scope=build-${{ matrix.arch }}
+          cache-to: type=gha,mode=max,scope=build-${{ matrix.arch }}

.github/workflows/publish.yml

@@ -11,40 +11,50 @@ permissions:
   id-token: write # OIDC
 
 jobs:
-  publish-docker-image:
-    timeout-minutes: 20
+  build-and-push:
+    timeout-minutes: 30
     strategy:
       matrix:
         include:
           - arch: amd64
             runner: ubuntu-latest
           - arch: arm64
-            runner: ubuntu-24.04-arm64
+            runner: ubuntu-24.04-arm
     runs-on: ${{ matrix.runner }}
 
     steps:
       - uses: actions/checkout@v4
 
-      # Log in so we can push the image layers + tags to Docker Hub
-      - uses: docker/login-action@v2
+      - name: Extract version from Cargo.toml
+        id: version
+        run: echo "version=$(awk -F '"' '/^version =/ {print $2}' Cargo.toml)" >> "$GITHUB_OUTPUT"
+
+      - uses: docker/setup-buildx-action@v3
+
+      - uses: docker/login-action@v3
         with:
           username: ${{ vars.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_WRITE_PASSWORD }}
 
-      - run: ./scripts/publish-image.sh
-        shell: bash
-        env:
-          ARCH: ${{ matrix.arch }}
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/${{ matrix.arch }}
+          push: true
+          tags: farcasterxyz/snapchain:${{ steps.version.outputs.version }}-${{ matrix.arch }}
+          cache-from: type=gha,scope=build-${{ matrix.arch }}
+          cache-to: type=gha,mode=max,scope=build-${{ matrix.arch }}
 
   create-manifest:
     timeout-minutes: 10
     runs-on: ubuntu-latest
-    needs: publish-docker-image
+    needs: build-and-push
 
     steps:
       - uses: actions/checkout@v4
 
-      - uses: docker/login-action@v2
+      - uses: docker/login-action@v3
         with:
           username: ${{ vars.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_WRITE_PASSWORD }}

Dockerfile

@@ -9,7 +9,6 @@ ARG ETH_SIGNATURE_VERIFIER_GIT_REPO_URL=https://github.com/CassOnMars/eth-signat
 ENV ETH_SIGNATURE_VERIFIER_GIT_REPO_URL=$ETH_SIGNATURE_VERIFIER_GIT_REPO_URL
 ARG ETH_SIGNATURE_VERIFIER_GIT_REF=8deb4a091982c345949dc66bf8684489d9f11889
 ENV RUST_BACKTRACE=1
-RUN echo "clear cache" # Invalidate cache to pick up latest eth-signature-verifier
 RUN <<EOF
 set -eu
 apt-get update && apt-get install -y libclang-dev git libjemalloc-dev llvm-dev make protobuf-compiler libssl-dev openssh-client cmake
@@ -22,8 +21,6 @@ cd ..
 git clone $MALACHITE_GIT_REPO_URL
 cd malachite
 git checkout $MALACHITE_GIT_REF
-cd code
-cargo build
 EOF
 
 # Unfortunately, we can't prefetch creates without including the source code,