feat: add dockerfile

.dockerignore

@@ -0,0 +1,13 @@
+.github/
+.git/
+.gitignore
+adr/
+assets/
+benches/
+ci/
+coverage_report/
+doc/
+target/
+
+Dockerfile
+.dockerignore

.github/workflows/docker.yml

@@ -0,0 +1,63 @@
+name: Create and publish a Docker image
+
+on:
+  push:
+    branches:
+      - 'main'
+    tags:
+      - 'v*'
+  pull_request:
+    branches:
+      - 'main'
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push-image:
+    # Only run on original PRs, not forks
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          tags: |
+            type=sha,enable=false
+            type=ref,event=branch,enable=true
+            type=ref,event=pr,enable=true
+            type=semver,pattern={{version}},enable=true
+
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

Dockerfile

@@ -0,0 +1,33 @@
+FROM rust:1.83-slim-bookworm AS builder
+
+WORKDIR /usr/src/myapp
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        curl \
+        git \
+        && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    cargo install just
+
+COPY justfile .
+
+RUN just install-deps
+
+ENV PATH="/root/.sp1/bin:$PATH"
+
+COPY . .
+
+RUN just build
+
+EXPOSE 8080
+
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends libssl3 && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /usr/src/myapp/target/release/prism-cli /usr/local/bin/prism-cli
+
+ENTRYPOINT ["prism-cli"]
+

justfile

@@ -4,6 +4,9 @@ DOCKER_COMPOSE_FILE := "ci/docker-compose.yml"
 # Helper function to use correct docker compose command
 docker_compose_cmd := if `uname -s` == "Linux" { "docker compose" } else { "docker-compose" }
 
+# Check if running as root by examining the effective user ID
+is_root := if `id -u` == "0" { "true" } else { "false" }
+
 celestia-up:
   #!/usr/bin/env bash
   set -euo pipefail
@@ -129,8 +132,13 @@ install-deps:
     for package in build-essential pkg-config libssl-dev libclang-dev clang; do \
       if ! dpkg -s $package > /dev/null 2>&1; then \
         echo "Installing $package..."; \
-        sudo apt update; \
-        sudo apt install $package -y; \
+        if {{is_root}}; then \
+          apt update; \
+          apt install $package -y; \
+        else \
+          sudo apt update; \
+          sudo apt install $package -y; \
+        fi; \
       else \
         echo "$package is already installed."; \
       fi; \
@@ -147,8 +155,13 @@ install-deps:
       fi; \
       brew install redis; \
     elif [ "$OS" = "Linux" ]; then \
-      sudo apt update; \
-      sudo apt install redis-server -y; \
+      if {{is_root}}; then \
+        apt update; \
+        apt install redis-server -y; \
+      else \
+        sudo apt update; \
+        sudo apt install redis-server -y; \
+      fi; \
     fi; \
     echo "Redis installation complete!"; \
   else \
@@ -182,4 +195,6 @@ install-deps:
     fi; \
   done
 
+  source ~/.bashrc || source ~/.bash_profile || source ~/.zshrc
+
   echo "All dependencies installed successfully!"