feat: build and push Docker image on release

- Add Dockerfile to build hf-mount-fuse container image
- Add Docker build & push job to release workflow
- Publish image as ghcr.io/huggingface/hf-mount-fuse:vX.Y.Z
- Enables CSI driver to use pre-built image instead of building from source

Author: XciD

.github/workflows/release.yml

@@ -7,9 +7,12 @@ on:
 
 permissions:
   contents: write
+  packages: write
 
 env:
   CARGO_TERM_COLOR: always
+  REGISTRY: ghcr.io
+  IMAGE: ghcr.io/huggingface/hf-mount-fuse
 
 jobs:
   build-linux:
@@ -104,6 +107,38 @@ jobs:
           name: macos-${{ matrix.arch }}
           path: dist/
 
+  docker:
+    name: Build & Push Docker
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract version
+        id: version
+        run: echo "tag=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"
+
+      - name: Determine tags
+        id: tags
+        run: |
+          TAG="${{ steps.version.outputs.tag }}"
+          TAGS="${{ env.IMAGE }}:${TAG}"
+          if [[ "$TAG" != *"-"* ]]; then
+            TAGS="${TAGS},${{ env.IMAGE }}:latest"
+          fi
+          echo "tags=$TAGS" >> "$GITHUB_OUTPUT"
+
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.tags.outputs.tags }}
+
   release:
     name: Create Release
     needs: [build-linux, build-macos]

Dockerfile

@@ -0,0 +1,11 @@
+# Build hf-mount-fuse (Rust)
+FROM rust:1.89-bookworm AS builder
+WORKDIR /build
+COPY . .
+RUN cargo build --release --features fuse --bin hf-mount-fuse
+
+# Runtime
+FROM debian:bookworm-slim
+RUN apt-get update && apt-get install -y --no-install-recommends libfuse3-3 ca-certificates && rm -rf /var/lib/apt/lists/*
+COPY --from=builder /build/target/release/hf-mount-fuse /usr/local/bin/
+ENTRYPOINT ["/usr/local/bin/hf-mount-fuse"]