feat: add Docker support for running upgrade scripts

.dockerignore

@@ -0,0 +1,30 @@
+# Dependencies (will be installed fresh in container)
+node_modules/
+
+# Build artifacts (will be built fresh in container)
+out/
+cache_forge/
+cache/
+artifacts/
+typechain-types/
+
+# Environment files (contain secrets)
+.env
+.env.*
+!.env.example
+
+# Git
+.git/
+.gitignore
+
+# IDE
+.vscode/
+.idea/
+
+# Test artifacts
+broadcast/
+coverage/
+
+# Docker
+Dockerfile
+.dockerignore

.github/workflows/test-docker.yml

@@ -0,0 +1,38 @@
+name: Test Docker
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  test-docker:
+    name: Test Docker Image
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Foundry
+        uses: foundry-rs/foundry-toolchain@v1
+        with:
+          version: stable
+
+      - name: Install forge dependencies
+        run: forge install
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          load: true
+          tags: orbit-actions:test
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Run Docker smoke tests
+        run: ./test/docker/test-docker.bash
+        env:
+          DOCKER_IMAGE: orbit-actions:test

.gitignore

@@ -1,5 +1,6 @@
 node_modules
 .env
+.DS_Store
 
 # Hardhat files
 /cache

Dockerfile

@@ -0,0 +1,30 @@
+FROM node:18-slim
+
+# Install dependencies for Foundry and git
+RUN apt-get update && apt-get install -y \
+    curl \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Foundry
+RUN curl -L https://foundry.paradigm.xyz | bash
+ENV PATH="/root/.foundry/bin:${PATH}"
+RUN foundryup
+
+# Install Yarn Classic (v1) - matches the repo's yarn.lock format
+RUN npm install -g --force yarn@1.22.22
+
+# Set working directory
+WORKDIR /app
+
+# Copy package files first for better caching
+COPY package.json yarn.lock ./
+
+# Install dependencies (using --ignore-scripts like CI does, then forge install separately)
+RUN yarn install --frozen-lockfile --ignore-scripts
+
+# Copy the rest of the repository
+COPY . .
+
+# Build contracts
+RUN forge build

README.md

@@ -25,6 +25,73 @@ For token bridge related operations, these are the additional requirements:
 yarn install
 ```
 
+## Using Docker
+
+The Orbit actions are also available via Docker.
+
+### Build the image
+
+First, ensure Foundry dependencies are installed:
+
+```bash
+forge install
+```
+
+Then build the image:
+
+```bash
+docker build -t orbit-actions .
+```
+
+### Run commands
+
+Pass the command you want to run directly to Docker:
+
+```bash
+# Check contract versions
+docker run --rm \
+  -e INBOX_ADDRESS=0xYourInboxAddress \
+  -e INFURA_KEY=your_infura_key \
+  orbit-actions \
+  yarn orbit:contracts:version --network arb1
+
+# Run forge script
+docker run --rm \
+  --env-file orbit.env \
+  -v $(pwd)/broadcast:/app/broadcast \
+  orbit-actions \
+  forge script --sender 0xYourAddress --rpc-url $PARENT_CHAIN_RPC --broadcast \
+  scripts/foundry/contract-upgrades/2.1.3/DeployNitroContracts2Point1Point3UpgradeAction.s.sol -vvv
+
+# Run cast commands
+docker run --rm \
+  orbit-actions \
+  cast call --rpc-url https://arb1.arbitrum.io/rpc 0xYourRollup "wasmModuleRoot()"
+```
+
+### Environment variables
+
+Create an `orbit.env` file with your configuration and pass it using `--env-file`:
+
+```bash
+PARENT_CHAIN_RPC=https://arb1.arbitrum.io/rpc
+INBOX_ADDRESS=0x...
+PROXY_ADMIN_ADDRESS=0x...
+PARENT_UPGRADE_EXECUTOR_ADDRESS=0x...
+```
+
+### Getting output artifacts
+
+Mount a volume to retrieve broadcast artifacts:
+
+```bash
+docker run --rm \
+  --env-file orbit.env \
+  -v $(pwd)/broadcast:/app/broadcast \
+  orbit-actions \
+  forge script ...
+```
+
 ## Check Version and Upgrade Path
 
 Run the follow command to check the version of Nitro contracts deployed on the parent chain of your Orbit chain.

package.json

@@ -20,6 +20,7 @@
     "test:gas-check": "forge snapshot --check --tolerance 1 --match-path \"test/unit/**/*.t.sol\"",
     "test:sigs": "./test/signatures/test-sigs.bash",
     "test:storage": "./test/storage/test-storage.bash",
+    "test:docker": "./test/docker/test-docker.bash",
     "orbit:contracts:version": "hardhat run scripts/orbit-versioner/orbitVersioner.ts",
     "gas-snapshot": "forge snapshot --match-path \"test/unit/**/*.t.sol\"",
     "fix": "yarn format; yarn test:sigs; yarn test:storage; yarn gas-snapshot"

test/docker/test-docker.bash

@@ -0,0 +1,100 @@
+#!/bin/bash
+set -euo pipefail
+
+# Docker smoke tests for orbit-actions
+# Verifies that all required tools and scripts are accessible in the Docker image
+
+IMAGE_NAME="${DOCKER_IMAGE:-orbit-actions:test}"
+
+echo "=== Docker Smoke Tests ==="
+echo "Image: $IMAGE_NAME"
+echo ""
+
+# Track failures
+FAILURES=0
+
+run_test() {
+    local name="$1"
+    shift
+    echo -n "Testing $name... "
+    if "$@" > /dev/null 2>&1; then
+        echo "OK"
+    else
+        echo "FAILED"
+        FAILURES=$((FAILURES + 1))
+    fi
+}
+
+# Test 1: Tools are installed
+echo "--- Tool Availability ---"
+run_test "forge" docker run --rm "$IMAGE_NAME" forge --version
+run_test "cast" docker run --rm "$IMAGE_NAME" cast --version
+run_test "yarn" docker run --rm "$IMAGE_NAME" yarn --version
+run_test "node" docker run --rm "$IMAGE_NAME" node --version
+
+# Test 2: Dependencies are installed
+echo ""
+echo "--- Dependencies ---"
+run_test "node_modules exists" docker run --rm "$IMAGE_NAME" test -d node_modules
+run_test "forge dependencies" docker run --rm "$IMAGE_NAME" test -d node_modules/@arbitrum
+
+# Test 3: Contracts compile
+echo ""
+echo "--- Contract Compilation ---"
+run_test "contracts built" docker run --rm "$IMAGE_NAME" test -d out
+
+# Test 4: Scripts are accessible
+echo ""
+echo "--- Script Accessibility ---"
+
+DEPLOY_SCRIPTS=(
+    "scripts/foundry/contract-upgrades/1.2.1/DeployNitroContracts1Point2Point1UpgradeAction.s.sol"
+    "scripts/foundry/contract-upgrades/2.1.0/DeployNitroContracts2Point1Point0UpgradeAction.s.sol"
+    "scripts/foundry/contract-upgrades/2.1.2/DeployNitroContracts2Point1Point2UpgradeAction.s.sol"
+    "scripts/foundry/contract-upgrades/2.1.3/DeployNitroContracts2Point1Point3UpgradeAction.s.sol"
+    "scripts/foundry/arbos-upgrades/at-timestamp/DeployUpgradeArbOSVersionAtTimestampAction.s.sol"
+)
+
+for script in "${DEPLOY_SCRIPTS[@]}"; do
+    script_name=$(basename "$script")
+    run_test "$script_name exists" docker run --rm "$IMAGE_NAME" test -f "$script"
+done
+
+EXECUTE_SCRIPTS=(
+    "scripts/foundry/contract-upgrades/1.2.1/ExecuteNitroContracts1Point2Point1Upgrade.s.sol"
+    "scripts/foundry/contract-upgrades/2.1.0/ExecuteNitroContracts2Point1Point0Upgrade.s.sol"
+    "scripts/foundry/contract-upgrades/2.1.2/ExecuteNitroContracts2Point1Point2Upgrade.s.sol"
+    "scripts/foundry/contract-upgrades/2.1.3/ExecuteNitroContracts2Point1Point3Upgrade.s.sol"
+)
+
+for script in "${EXECUTE_SCRIPTS[@]}"; do
+    script_name=$(basename "$script")
+    run_test "$script_name exists" docker run --rm "$IMAGE_NAME" test -f "$script"
+done
+
+# Test 5: Yarn scripts work
+echo ""
+echo "--- Yarn Scripts ---"
+run_test "yarn orbit:contracts:version --help" docker run --rm "$IMAGE_NAME" yarn orbit:contracts:version --help
+
+# Test 6: Unit tests pass
+echo ""
+echo "--- Unit Tests ---"
+echo "Running unit tests inside container..."
+if docker run --rm "$IMAGE_NAME" yarn test:unit; then
+    echo "Unit tests: OK"
+else
+    echo "Unit tests: FAILED"
+    FAILURES=$((FAILURES + 1))
+fi
+
+# Summary
+echo ""
+echo "=== Summary ==="
+if [ $FAILURES -eq 0 ]; then
+    echo "All tests passed!"
+    exit 0
+else
+    echo "$FAILURES test(s) failed"
+    exit 1
+fi