Merge pull request #19 from buildkite/feat_chainguard_static_image

feat: migrate to ko and chainguard static image for leaner docker images

Author: wolfeidau

.buildkite/Dockerfile.build

@@ -1,11 +1,3 @@
 FROM public.ecr.aws/docker/library/golang:1.24.2@sha256:1ecc479bc712a6bdb56df3e346e33edcc141f469f82840bab9f4bc2bc41bf91d
 
-COPY --from=goreleaser/goreleaser-pro:v2.8.2@sha256:62bff5f26c37e1615265ae9c1106fbabc427882fd442c67a89db4c513d31b326 /usr/bin/goreleaser /usr/local/bin/goreleaser
-
-# Install Docker CLI for GoReleaser
-RUN apt-get update && \
-    apt-get install -y apt-transport-https ca-certificates curl gnupg lsb-release && \
-    curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg && \
-    echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null && \
-    apt-get update && \
-    apt-get install -y docker-ce-cli
+COPY --from=goreleaser/goreleaser-pro:v2.8.2@sha256:62bff5f26c37e1615265ae9c1106fbabc427882fd442c67a89db4c513d31b326 /usr/bin/goreleaser /usr/local/bin/goreleaser

.goreleaser.yaml

@@ -16,28 +16,50 @@ before:
     - go generate ./...
 
 builds:
-  - binary: buildkite-mcp-server
+  - id: buildkite-mcp-server
+    binary: buildkite-mcp-server
     main: ./cmd/buildkite-mcp-server/main.go
     env:
       - CGO_ENABLED=0
     goos:
       - linux
       - windows
       - darwin
-
-dockers:
-  - image_templates:
-    - "buildkite/buildkite-mcp-server:{{ .Version }}"
-    - "buildkite/buildkite-mcp-server:latest"
-    dockerfile: Dockerfile
-    build_flag_templates:
-    - "--pull"
-    - "--label=org.opencontainers.image.created={{.Date}}"
-    - "--label=org.opencontainers.image.title={{.ProjectName}}"
-    - "--label=org.opencontainers.image.revision={{.FullCommit}}"
-    - "--label=org.opencontainers.image.version={{.Version}}"
-    use: buildx
-
+    goarch:
+      - amd64
+      - arm64
+    goamd64:
+      - v2
+    ldflags:
+      - -s -w -X main.version={{.Version}}
+    flags:
+      - -trimpath
+kos:
+  - repositories:
+      - ghcr.io/buildkie/buildkite-mcp-server
+    build: buildkite-mcp-server
+    main: ./cmd/buildkite-mcp-server/
+    creation_time: "{{.CommitTimestamp}}"
+    base_image: 'cgr.dev/chainguard/static:latest@sha256:1ff7590cbc50eaaa917c34b092de0720d307f67d6d795e4f749a0b80a2e95a2c'
+    tags:
+      - '{{.Version}}'
+      - latest
+    labels:
+      org.opencontainers.image.authors: Buildkite Inc. https://buildkite.com
+      org.opencontainers.image.source: https://github.com/buildkite/buildkite-mcp-server
+      org.opencontainers.image.created: "{{.Date}}"
+      org.opencontainers.image.title: "{{.ProjectName}}"
+      org.opencontainers.image.revision: "{{.FullCommit}}"
+      org.opencontainers.image.version: "{{.Version}}"
+    bare: true
+    preserve_import_paths: false
+    # FIXME: We use GOOS and -split in our pipeline which is causing issues with the ko integration
+    # so we disable it here when the GOOS is set to something other than linux. This avoids 
+    # the ko build to fail when running on macos or windows.
+    disable: '{{ and (isEnvSet "GOOS") (ne .Env.GOOS "linux") }}'
+    platforms:
+      - linux/amd64
+      - linux/arm64
 archives:
   - formats: ["tar.gz"]
     # this name template makes the OS and Arch compatible with the results of `uname`.