images, canton: Fix libjemalloc availability (#1721)

Signed-off-by: Stanislav German-Evtushenko <ginermail@gmail.com>
Co-authored-by: Itai Segall <itai.segall@digitalasset.com>

Author: giner

.github/actions/tests/scala_test/action.yml

@@ -202,6 +202,21 @@ runs:
         echo "Setting max_user_watches..."
         echo fs.inotify.max_user_watches=524288 | sudo tee -a /etc/sysctl.conf && sudo sysctl -p
 
+    # Make sure the directory "$HOME/.docker" has the right permissions (this
+    # is needed when the runner mounts file to inside the folder and created
+    # .docker with root permissions)
+    # See https://github.com/hyperledger-labs/splice/blob/f11ef2ba697be68cad218decd09a9fd9d4e41444/cluster/pulumi/gha/src/runners.ts#L196
+    - name: Make sure .docker directory is owned by the current user
+      if: ${{ fromJson(inputs.with_docker_images) }}
+      shell: bash
+      run: |
+        [[ -d "$HOME/.docker" ]] && sudo chown "$(id -u):$(id -g)" "$HOME/.docker"
+
+    # Install QEMU to support building multi-arch images
+    - name: Set up QEMU
+      if: ${{ fromJson(inputs.with_docker_images) }}
+      uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #v3.6.0
+
     - name: Build Docker images
       if: ${{ fromJson(inputs.with_docker_images) }}
       uses: ./.github/actions/nix/run_bash_command_in_nix

cluster/images/canton/Dockerfile

@@ -14,7 +14,7 @@ ARG TARGETPLATFORM
 
 # Install screen for running the console in a headless server
 RUN xx-apt-get update \
-   && DEBIAN_FRONTEND=noninteractive xx-apt-get install -y screen tini libjemalloc2 \
+   && DEBIAN_FRONTEND=noninteractive xx-apt-get install -y screen tini \
    && xx-apt-get clean \
    && rm -rf /var/cache/apt/archives
 
@@ -36,6 +36,12 @@ FROM fullstorydev/grpcurl:v1.9.2@sha256:0c3796edc8b6bb1814da2f11a554996237c0dd98
 
 FROM eclipse-temurin:21-jdk-noble@sha256:5a65f334da5a91a66076735d78e3ae30483a2593ac108f830dcd59521f2535cd
 
+# Install platform-dependent dependencies at the last step to ensure correct paths and versions
+RUN apt-get update \
+   && DEBIAN_FRONTEND=noninteractive apt-get install -y libjemalloc2 \
+   && apt-get clean \
+   && rm -rf /var/lib/apt/lists/*
+
 COPY --from=build /usr/bin/tini /usr/bin/tini
 COPY --from=build /usr/bin/screen /usr/bin/screen
 COPY --from=grpcurl /bin/grpcurl /bin/grpcurl

cluster/images/splice-app/Dockerfile

@@ -16,7 +16,7 @@ ARG TARGETPLATFORM
 
 # Install screen for running the console in a headless server,
 RUN xx-apt-get update \
-   && DEBIAN_FRONTEND=noninteractive xx-apt-get install -y screen tini libjemalloc2 \
+   && DEBIAN_FRONTEND=noninteractive xx-apt-get install -y screen tini \
    && xx-apt-get clean \
    && rm -rf /var/cache/apt/archives
 
@@ -38,6 +38,13 @@ RUN ln -s splice-node/bin/splice-node splice-image-bin
 
 # This Dockerfile is a modified version of Canton's Dockerfile
 FROM eclipse-temurin:21-jdk-noble@sha256:5a65f334da5a91a66076735d78e3ae30483a2593ac108f830dcd59521f2535cd
+
+# Install platform-dependent dependencies at the last step to ensure correct paths and versions
+RUN apt-get update \
+   && DEBIAN_FRONTEND=noninteractive apt-get install -y libjemalloc2 \
+   && apt-get clean \
+   && rm -rf /var/lib/apt/lists/*
+
 COPY --from=build /usr/bin/tini /usr/bin/tini
 COPY --from=build /usr/bin/screen /usr/bin/screen
 COPY --from=build /app/ /app/