Dockerfileand CI for bootnode

.github/workflows/docker-build-scan.yaml

@@ -7,7 +7,7 @@ permissions:
  contents: read
 
 jobs:
- build-scan-container:
+ build-scan-container-geth:
  permissions:
  contents: read
  security-events: write
@@ -23,3 +23,20 @@ jobs:
  context: .
  file: Dockerfile
  trivy: true
+
+ build-scan-container-bootnode:
+ permissions:
+ contents: read
+ security-events: write
+ id-token: write
+ uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@main
+ name: Build us-west1-docker.pkg.dev/blockchaintestsglobaltestnet/dev-images/op-geth-bootnode:${{ github.sha }}
+ with:
+ workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-op-geth/providers/github-by-repos
+ service-account: '[email protected]'
+ artifact-registry: us-west1-docker.pkg.dev/blockchaintestsglobaltestnet/dev-images/op-geth
+ tags: ${{ github.sha }}
+ platforms: linux/amd64,linux/arm64
+ context: .
+ file: Dockerfile.bootnode
+ trivy: true

Dockerfile.bootnode

@@ -0,0 +1,33 @@
+# Support setting various labels on the final image
+ARG COMMIT=""
+ARG VERSION=""
+ARG BUILDNUM=""
+
+# Build Geth bootnode in a stock Go builder container
+FROM golang:1.22-alpine as builder
+
+RUN apk add --no-cache gcc musl-dev linux-headers git
+
+# Get dependencies - will also be cached if we won't change go.mod/go.sum
+COPY go.mod /go-ethereum/
+COPY go.sum /go-ethereum/
+RUN cd /go-ethereum && go mod download
+
+ADD . /go-ethereum
+RUN cd /go-ethereum && go run build/ci.go install -static ./cmd/bootnode
+
+# Pull Geth bootnode into a second stage deploy alpine container
+FROM alpine:latest
+
+RUN apk add --no-cache ca-certificates
+COPY --from=builder /go-ethereum/build/bin/bootnode /usr/local/bin/
+
+EXPOSE 8545 8546 30303 30303/udp
+ENTRYPOINT ["bootnode"]
+
+# Add some metadata labels to help programmatic image consumption
+ARG COMMIT=""
+ARG VERSION=""
+ARG BUILDNUM=""
+
+LABEL commit="$COMMIT" version="$VERSION" buildnum="$BUILDNUM"