Add caching

uses qemu emulator with arm64
default local

Author: ismellike

.github/workflows/release.yml

@@ -16,7 +16,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -36,6 +35,11 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+        with:
+          platforms: arm64
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -48,4 +52,6 @@ jobs:
 
       - name: Build and push Docker image
         run: |
-          task build IS_LOCAL=false VERSION=${{ env.VERSION }}
+          task build IS_LOCAL=false VERSION="$VERSION" \
+            CACHE_FROM="type=gha,scope=wasi-builder" \
+            CACHE_TO="type=gha,scope=wasi-builder,mode=max"

Dockerfile

@@ -12,7 +12,8 @@ ARG WKG_VERSION
 ENV CARGO_HOME=/usr/local/cargo \
     RUSTUP_HOME=/usr/local/rustup \
     PATH=/usr/local/cargo/bin:/usr/local/rustup/bin:$PATH \
-    CARGO_TERM_COLOR=never
+    CARGO_TERM_COLOR=never \
+    UMASK=022
 
 RUN apt-get update \
  && apt-get install -y --no-install-recommends \
@@ -31,9 +32,6 @@ RUN --mount=type=cache,target=/usr/local/cargo/registry \
     && cargo install --locked wasm-tools@${WASM_TOOLS_VERSION} \
     && cargo install --locked wkg@${WKG_VERSION}
 
-# Set umask for reproducible file permissions
-RUN umask 022
-
 WORKDIR /docker
 COPY entrypoint.sh /usr/local/bin/entrypoint
 RUN chmod +x /usr/local/bin/entrypoint

Taskfile.yml

@@ -27,7 +27,9 @@ tasks:
         msg: "This task can only run on Linux (current OS: {{OS}})"
     vars:
       IS_LOCAL: '{{.IS_LOCAL | default "true"}}'
-      VERSION: '{{.VERSION | default "latest"}}'
+      VERSION: '{{.VERSION | default "local"}}'
+      CACHE_FROM: '{{.CACHE_FROM | default ""}}'
+      CACHE_TO: '{{.CACHE_TO | default ""}}'
     cmds:
       - |
         # Check if version is a git hash (7 characters, alphanumeric)
@@ -49,13 +51,25 @@ tasks:
           PUSH_FLAG="--push"
         fi
 
+        CACHE_FROM_FLAG=""
+        if [ -n "{{.CACHE_FROM}}" ]; then
+          CACHE_FROM_FLAG="--cache-from {{.CACHE_FROM}}"
+        fi
+
+        CACHE_TO_FLAG=""
+        if [ -n "{{.CACHE_TO}}" ]; then
+          CACHE_TO_FLAG="--cache-to {{.CACHE_TO}}"
+        fi
+
         docker buildx build \
           $PLATFORM_FLAG \
           $TAGS \
           --build-arg RUST_VERSION={{.RUST_VERSION}} \
           --build-arg CARGO_COMPONENT_VERSION={{.CARGO_COMPONENT_VERSION}} \
           --build-arg WASM_TOOLS_VERSION={{.WASM_TOOLS_VERSION}} \
           --build-arg WKG_VERSION={{.WKG_VERSION}} \
+          $CACHE_FROM_FLAG \
+          $CACHE_TO_FLAG \
           $LOAD_FLAG \
           $PUSH_FLAG \
           -f {{.DOCKERFILE}} docker
@@ -74,7 +88,7 @@ tasks:
   test:
     desc: Test the built Docker image
     vars:
-      VERSION: '{{.version | default "latest"}}'
+      VERSION: '{{.version | default "local"}}'
       TEST_DIR: /tmp/wasi-test
     cmds:
       - task: test:setup

docker/entrypoint.sh

@@ -5,6 +5,9 @@ set -euo pipefail
 export LC_ALL=C
 export LANG=C
 
+# Ensure deterministic file permissions inside the container
+umask "${UMASK:-022}"
+
 # Production-ready WASI component builder
 # Exit codes:
 # 1 - Usage error