add Zig example

Author: hooksie1

.gitignore

@@ -1,2 +1,4 @@
 .idea
 .DS_Store
+zig/linky/.zig-cache/*
+zig/linky/zig-out/*

zig/linky/Dockerfile

@@ -0,0 +1,10 @@
+FROM cgr.dev/badlyenginee.red/zig:latest-dev AS builder
+WORKDIR /app
+ADD . .
+RUN apk add --no-cache bash
+RUN zig build --release=fast -Dtarget=aarch64-linux-musl -Doptimize=ReleaseFast
+
+FROM cgr.dev/chainguard/static
+COPY --from=builder /app/zig-out/bin/app /usr/local/bin/app
+ENTRYPOINT ["/usr/local/bin/app"]
+

zig/linky/README.md

@@ -0,0 +1,31 @@
+# Zig Example
+
+## Using the Chainguard Image
+1. cd into the linky directory
+```
+cd linky
+```
+
+2. Build the application
+```
+docker build -t zig-linky .
+```
+
+3. Run the image
+```
+docker run -p 8080:8080 --rm zig-linky
+```
+
+4. Test application
+Open http://localhost:8080/foo
+Open http://localhost:8080/test
+
+5. Scan the image:
+```
+grype zig-linky
+```
+
+## Takeaways
+1. 0 vulnerabilities from the grype scan (it's a static image)
+2. Mutltistage build
+3. Number of package, files, etc.

zig/linky/build.zig

@@ -0,0 +1,83 @@
+const std = @import("std");
+
+// Although this function looks imperative, note that its job is to
+// declaratively construct a build graph that will be executed by an external
+// runner.
+pub fn build(b: *std.Build) void {
+    // Standard target options allows the person running `zig build` to choose
+    // what target to build for. Here we do not override the defaults, which
+    // means any target is allowed, and the default is native. Other options
+    // for restricting supported target set are available.
+    const target = b.standardTargetOptions(.{});
+
+    // Standard optimization options allow the person running `zig build` to select
+    // between Debug, ReleaseSafe, ReleaseFast, and ReleaseSmall. Here we do not
+    // set a preferred release mode, allowing the user to decide how to optimize.
+    const optimize = b.standardOptimizeOption(.{});
+
+    const zap = b.dependency("zap", .{
+        .target = target,
+        .optimize = optimize,
+        .openssl = false,
+    });
+
+    // We will also create a module for our other entry point, 'main.zig'.
+    const exe_mod = b.createModule(.{
+        // `root_source_file` is the Zig "entry point" of the module. If a module
+        // only contains e.g. external object files, you can make this `null`.
+        // In this case the main source file is merely a path, however, in more
+        // complicated build scripts, this could be a generated file.
+        .root_source_file = b.path("src/main.zig"),
+        .target = target,
+        .optimize = optimize,
+        .link_libc = true,
+    });
+
+    // This creates another `std.Build.Step.Compile`, but this one builds an executable
+    // rather than a static library.
+    const exe = b.addExecutable(.{
+        .name = "app",
+        .root_module = exe_mod,
+    });
+    exe.root_module.addImport("zap", zap.module("zap"));
+
+    // This declares intent for the executable to be installed into the
+    // standard location when the user invokes the "install" step (the default
+    // step when running `zig build`).
+    b.installArtifact(exe);
+
+    // This *creates* a Run step in the build graph, to be executed when another
+    // step is evaluated that depends on it. The next line below will establish
+    // such a dependency.
+    const run_cmd = b.addRunArtifact(exe);
+
+    // By making the run step depend on the install step, it will be run from the
+    // installation directory rather than directly from within the cache directory.
+    // This is not necessary, however, if the application depends on other installed
+    // files, this ensures they will be present and in the expected location.
+    run_cmd.step.dependOn(b.getInstallStep());
+
+    // This allows the user to pass arguments to the application in the build
+    // command itself, like this: `zig build run -- arg1 arg2 etc`
+    if (b.args) |args| {
+        run_cmd.addArgs(args);
+    }
+
+    // This creates a build step. It will be visible in the `zig build --help` menu,
+    // and can be selected like this: `zig build run`
+    // This will evaluate the `run` step rather than the default, which is "install".
+    const run_step = b.step("run", "Run the app");
+    run_step.dependOn(&run_cmd.step);
+
+    const exe_unit_tests = b.addTest(.{
+        .root_module = exe_mod,
+    });
+
+    const run_exe_unit_tests = b.addRunArtifact(exe_unit_tests);
+
+    // Similar to creating the run step earlier, this exposes a `test` step to
+    // the `zig build --help` menu, providing a way for the user to request
+    // running the unit tests.
+    const test_step = b.step("test", "Run unit tests");
+    test_step.dependOn(&run_exe_unit_tests.step);
+}

zig/linky/build.zig.zon

@@ -0,0 +1,52 @@
+.{
+    // This is the default name used by packages depending on this one. For
+    // example, when a user runs `zig fetch --save <url>`, this field is used
+    // as the key in the `dependencies` table. Although the user can choose a
+    // different name, most users will stick with this provided value.
+    //
+    // It is redundant to include "zig" in this name because it is already
+    // within the Zig package namespace.
+    .name = .zig_NkVxdOcCH0,
+
+    // This is a [Semantic Version](https://semver.org/).
+    // In a future version of Zig it will be used for package deduplication.
+    .version = "0.0.1",
+
+    // Together with name, this represents a globally unique package
+    // identifier. This field is generated by the Zig toolchain when the
+    // package is first created, and then *never changes*. This allows
+    // unambiguous detection of one package being an updated version of
+    // another.
+    //
+    // When forking a Zig project, this id should be regenerated (delete the
+    // field and run `zig build`) if the upstream project is still maintained.
+    // Otherwise, the fork is *hostile*, attempting to take control over the
+    // original project's identity. Thus it is recommended to leave the comment
+    // on the following line intact, so that it shows up in code reviews that
+    // modify the field.
+    .fingerprint = 0xc9723cac69bd5883, // Changing this has security and trust implications.
+
+    // Tracks the earliest Zig version that the package considers to be a
+    // supported use case.
+    .minimum_zig_version = "0.14.1",
+
+    // This field is optional.
+    // Each dependency must either provide a `url` and `hash`, or a `path`.
+    // `zig build --fetch` can be used to fetch all dependencies of a package, recursively.
+    // Once all dependencies are fetched, `zig build` no longer requires
+    // internet connectivity.
+    .dependencies = .{
+        .zap = .{
+            .url = "git+https://github.com/zigzap/zap#ec7cac6f6ab8e1892fe6fc499fd37cd93f7b2256",
+            .hash = "zap-0.9.1-GoeB85JTJAADY1vAnA4lTuU66t6JJiuhGos5ex6CpifA",
+        },
+    },
+    .paths = .{
+        "build.zig",
+        "build.zig.zon",
+        "src",
+        // For example...
+        //"LICENSE",
+        //"README.md",
+    },
+}

zig/linky/src/main.zig

@@ -0,0 +1,45 @@
+const std = @import("std");
+const zap = @import("zap");
+
+fn dispatch_routes(r: zap.Request) !void {
+    if (r.path) |path| {
+        if (routes.get(path)) |handler| {
+            try handler(r);
+            return;
+        }
+    }
+
+    try r.sendBody("default response");
+}
+
+var routes: std.StringHashMap(zap.HttpRequestFn) = undefined;
+
+fn test_handler(r: zap.Request) !void {
+    r.sendBody("it works!") catch return;
+}
+
+fn build_routes(a: std.mem.Allocator) !void {
+    routes = std.StringHashMap(zap.HttpRequestFn).init(a);
+    try routes.put("/test", test_handler);
+}
+
+pub fn main() !void {
+    var gpa = std.heap.GeneralPurposeAllocator(.{}){};
+    const allocator = gpa.allocator();
+    defer _ = gpa.deinit();
+
+    try build_routes(allocator);
+    var listener = zap.HttpListener.init(.{
+        .port = 8080,
+        .on_request = dispatch_routes,
+        .log = true,
+    });
+    try listener.listen();
+
+    std.debug.print("Listening on :8080\n", .{});
+
+    zap.start(.{
+        .threads = 2,
+        .workers = 2,
+    });
+}