Merge branch 'main' into renovate/clap-4.x

.github/workflows/build-docker-release.yaml

@@ -13,6 +13,7 @@ on:
 permissions:
   id-token: write
   contents: read
+  packages: write
 
 jobs:
   dockerpublish:

.github/workflows/build-main-docker-tag.yaml

@@ -13,6 +13,7 @@ on:
 permissions:
   id-token: write
   contents: read
+  packages: write
 
 jobs:
   dockerpublish:

.github/workflows/docker_ecr_arch64.yaml

@@ -11,7 +11,9 @@ on:
       - ".github/workflows/docker_ecr_arch64.yaml"
     tags:
       - unleash-edge-v[0-9]+.*
-
+permissions:
+  id-token: write
+  contents: read
 jobs:
   docker:
     runs-on: ubuntu-latest
@@ -33,12 +35,11 @@ jobs:
       - name: Build release
         run: |
           cross build --release --target=aarch64-unknown-linux-gnu
-      - name: Configure aws credentials
-        uses: aws-actions/configure-aws-credentials@v1-node16
-        id: aws-eu-north
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v2
         with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          role-to-assume: arn:aws:iam::726824350591:role/unleash-github-ecr-private-publish-role
+          role-session-name: actions-push-to-ecr-private
           aws-region: eu-north-1
       - name: Login to ECR
         id: login-ecr-eu-north

Cross.toml

@@ -0,0 +1,4 @@
+[target.x86_64-unknown-linux-gnu]
+dockerfile = "Dockerfile.cross.x86_64"
+[target.aarch64-unknown-linux-gnu]
+dockerfile = "Dockerfile.cross.aarch64"

Dockerfile

@@ -1,4 +1,4 @@
-FROM gcr.io/distroless/cc
+FROM gcr.io/distroless/cc-debian11
 
 COPY target/aarch64-unknown-linux-gnu/release/unleash-edge /unleash-edge
 ENTRYPOINT ["/unleash-edge"]

Dockerfile.cross.aarch64

@@ -0,0 +1,3 @@
+FROM ghcr.io/cross-rs/aarch64-unknown-linux-gnu:edge
+RUN dpkg --add-architecture arm64
+RUN apt-get update && apt-get install --assume-yes libssl-dev:arm64