worldcoin
diff --git a/‎.github/workflows/build-and-push-rerandomization-protocol.yaml‎
Lines changed: 61 additions & 0 deletions b/‎.github/workflows/build-and-push-rerandomization-protocol.yaml‎
Lines changed: 61 additions & 0 deletions
diff --git a/‎Cargo.lock‎
Lines changed: 214 additions & 1 deletion b/‎Cargo.lock‎
Lines changed: 214 additions & 1 deletion
diff --git a/‎Dockerfile.shares-re-randomization‎
Lines changed: 40 additions & 0 deletions b/‎Dockerfile.shares-re-randomization‎
Lines changed: 40 additions & 0 deletions
@@ -0,0 +1,61 @@
+name: Build and push image for rerandomization protocol
+
+on:
+  push:
+    branches:
+      - main
+      - "dk/re_randomize_db"
+    paths:
+      - Dockerfile.shares-re-randomization
+      - iris-mpc-upgrade/**
+      - .github/workflows/build-and-push-rerandomization-protocol.yaml
+
+  release:
+    types:
+      - 'published'
+
+  workflow_dispatch:
+
+concurrency:
+  group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
+  cancel-in-progress: true
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: "rerandomization-protocol"
+
+jobs:
+  docker:
+    timeout-minutes: 40
+    runs-on:
+      labels: ubuntu-22.04-16core
+    permissions:
+      packages: write
+      contents: read
+      attestations: write
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435
+      - name: Log in to the Container registry
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and Push
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83
+        with:
+          context: .
+          push: true
+          tags: |
+            ${{ env.REGISTRY }}/worldcoin/${{ env.IMAGE_NAME }}:${{ github.sha }}
+            ${{ github.event_name == 'release' && format('{0}/worldcoin/{1}:{2}', env.REGISTRY, env.IMAGE_NAME, github.event.release.tag_name) || '' }}
+          platforms: linux/amd64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          file: Dockerfile.shares-re-randomization
@@ -0,0 +1,40 @@
+FROM public.ecr.aws/ubuntu/ubuntu:22.04 AS build-image
+
+WORKDIR /src
+RUN apt-get update && apt-get install -y \
+    curl \
+    build-essential \
+    libssl-dev \
+    texinfo \
+    libcap2-bin \
+    pkg-config \
+    git \
+    devscripts \
+    debhelper \
+    ca-certificates \
+    protobuf-compiler \
+    wget
+
+RUN curl https://sh.rustup.rs -sSf | sh -s -- -y
+ENV PATH "/root/.cargo/bin:${PATH}"
+ENV RUSTUP_HOME "/root/.rustup"
+ENV CARGO_HOME "/root/.cargo"
+RUN rustup toolchain install 1.85.0
+RUN rustup default 1.85.0
+RUN rustup component add cargo
+RUN cargo install cargo-build-deps \
+    && cargo install cargo-edit --version 0.13.6 --locked
+
+FROM build-image AS build-app
+WORKDIR /src/iris-mpc
+COPY . .
+RUN cargo build -p iris-mpc-bins --release --bin rerandomize-db --bin rerandomize-check --bin seed-v2-dbs
+
+FROM ubuntu:22.04
+ENV DEBIAN_FRONTEND=noninteractive
+
+COPY --from=build-app /src/iris-mpc/target/release/rerandomize-db  /bin/rerandomize-db
+COPY --from=build-app /src/iris-mpc/target/release/seed-v2-dbs /bin/seed-v2-dbs
+
+USER 65534
+ENTRYPOINT ["/bin/rerandomize-db"]