feat(mpm): Add cargo-workspace-docker command with feature extraction

- Add new `mpm tools cargo-workspace-docker` command that generates
  minimal Cargo.toml files for Docker builds
- Extract package-level features from dependencies (e.g., serde derive)
- Fix arm64 binary builds in CI with explicit matrix dimensions
- Fix zitadel-resource-controller Docker build by switching from
  nightly to stable Rust (1.92.0)
- Remove old standalone cargo-workspace-docker utility
- Update all build.sh scripts to use the new command name

Author: firstdorsal

.github/workflows/publish-mpm.yml

@@ -4,6 +4,15 @@ on:
   push:
     tags:
       - 'mpm-v*'
+    paths:
+      - 'utils/mpm/**'
+      - 'utils/mows-common-rust/**'
+      - '.github/workflows/publish-mpm.yml'
+  pull_request:
+    paths:
+      - 'utils/mpm/**'
+      - 'utils/mows-common-rust/**'
+      - '.github/workflows/publish-mpm.yml'
   workflow_dispatch:
     inputs:
       dry_run:
@@ -13,24 +22,85 @@ on:
         type: boolean
 
 jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache cargo registry
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            utils/mpm/target
+          key: ${{ runner.os }}-cargo-test-${{ hashFiles('utils/mpm/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-test-
+
+      - name: Run unit tests
+        run: |
+          cd utils/mpm
+          cargo test --release
+
+      - name: Build release binary for e2e tests
+        run: |
+          cd utils/mpm
+          cargo build --release
+
+      - name: Run e2e tests
+        run: |
+          cd utils/mpm/tests
+          ./run-all.sh
+        env:
+          MPM_BIN: ${{ github.workspace }}/utils/mpm/target/release/mpm
+
   build:
+    needs: test
+    if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
+        arch: [amd64, arm64]
         include:
-          - target: x86_64-unknown-linux-musl
+          - arch: amd64
+            target: x86_64-unknown-linux-musl
+            os_name: linux
+          - arch: arm64
+            target: aarch64-unknown-linux-musl
             os_name: linux
-            arch: amd64
     steps:
       - uses: actions/checkout@v4
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Cache Docker layers
+        uses: actions/cache@v4
+        with:
+          path: /tmp/.buildx-cache
+          key: ${{ runner.os }}-buildx-${{ matrix.arch }}-${{ hashFiles('utils/mpm/Cargo.lock', 'utils/mpm/Dockerfile') }}
+          restore-keys: |
+            ${{ runner.os }}-buildx-${{ matrix.arch }}-
+
       - name: Build static binary
         run: |
           cd utils/mpm
-          ./build.sh
+          TARGETARCH=${{ matrix.arch }} BUILDX_CACHE_DIR=/tmp/.buildx-cache ./build.sh
+
+      - name: Move cache
+        run: |
+          rm -rf /tmp/.buildx-cache
+          if [ -d /tmp/.buildx-cache-new ]; then
+            mv /tmp/.buildx-cache-new /tmp/.buildx-cache
+          fi
 
       - name: Get version from tag
         id: get_version

Cargo.lock

@@ -1,4 +1,5 @@
-# This file is generated by cargo-workspace-docker. Do not edit manually.
+# This file is generated by mpm. Do not edit manually.
+
 [profile.release]
 debug = false
 debug-assertions = false
@@ -12,7 +13,6 @@ resolver = "2"
 
 [workspace.dependencies.reqwest]
 default-features = false
-features = ["rustls-tls"]
 version = "0.12.15"
 
 [workspace.lints.clippy]

apis/cloud/filez-old/addons/metadata/cargo-workspace-docker.toml

@@ -1,6 +1,8 @@
 #!/bin/bash
 set -euo pipefail
 
+mpm tools cargo-workspace-docker
+
 export SERVICE_NAME="filez-apps-backend-images"
 
 export BAKE_ARGS="${BAKE_ARGS:-default} --allow=fs.read=/home/paul/projects/mows"

apis/cloud/filez/apps/backend/images/build.sh

@@ -1,4 +1,5 @@
-# This file is generated by cargo-workspace-docker. Do not edit manually.
+# This file is generated by mpm. Do not edit manually.
+
 [profile.release]
 debug = false
 debug-assertions = false
@@ -12,31 +13,23 @@ resolver = "2"
 
 [workspace.dependencies.anyhow]
 default-features = false
-features = ["default"]
 version = "1.0.98"
 
 [workspace.dependencies.chrono]
 default-features = false
-features = ["default"]
 version = "0.4.41"
 
-[workspace.dependencies.data-encoding]
-default-features = false
-features = ["default"]
-version = "2.9.0"
-
 [workspace.dependencies.filez-server-client]
 default-features = false
 path = "./filez-server-client"
 
 [workspace.dependencies.futures]
 default-features = false
-features = ["default"]
 version = "0.3.31"
 
-[workspace.dependencies.gtmpl]
+[workspace.dependencies.gtmpl-ng]
 default-features = false
-version = "0.7"
+version = "0.7.5"
 
 [workspace.dependencies.gtmpl_derive]
 default-features = false
@@ -48,52 +41,38 @@ version = "0.5.1"
 
 [workspace.dependencies.k8s-openapi]
 default-features = false
-features = ["latest"]
 version = "=0.23.0"
 
 [workspace.dependencies.kube]
 default-features = false
-features = ["runtime", "derive", "default"]
 version = "=0.96.0"
 
 [workspace.dependencies.mows-common-rust]
 default-features = false
-features = ["default"]
 path = "./mows-common-rust"
 
 [workspace.dependencies.opentelemetry]
 default-features = false
-features = ["trace"]
 version = "=0.26.0"
 
 [workspace.dependencies.opentelemetry-otlp]
 default-features = false
-features = ["trace", "logs", "grpc-tonic", "metrics"]
 version = "=0.26.0"
 
 [workspace.dependencies.opentelemetry_sdk]
 default-features = false
-features = ["rt-tokio"]
 version = "=0.26.0"
 
 [workspace.dependencies.rand]
 default-features = false
-features = ["default"]
 version = "0.9.1"
 
-[workspace.dependencies.rcgen]
-default-features = false
-features = ["pem", "x509-parser", "default", "crypto"]
-version = "0.13.2"
-
 [workspace.dependencies.reqwest]
 default-features = false
-features = ["json", "rustls-tls", "stream"]
 version = "0.12.15"
 
 [workspace.dependencies.reqwest-tracing]
 default-features = false
-features = ["opentelemetry_0_28"]
 version = "0.5.7"
 
 [workspace.dependencies.serde]
@@ -108,48 +87,32 @@ version = "1.0.141"
 default-features = false
 version = "0.9.34"
 
-[workspace.dependencies.sha2]
-default-features = false
-features = ["default"]
-version = "0.10.9"
-
 [workspace.dependencies.thiserror]
 default-features = false
 version = "2.0.12"
 
-[workspace.dependencies.time]
-default-features = false
-features = ["default"]
-version = "0.3.41"
-
 [workspace.dependencies.tokio]
 default-features = false
-features = ["full"]
 version = "1.45.0"
 
 [workspace.dependencies.tracing]
 default-features = false
-features = ["default"]
 version = "0.1.40"
 
 [workspace.dependencies.tracing-opentelemetry]
 default-features = false
-features = ["metrics", "tracing-log"]
 version = "=0.27.0"
 
 [workspace.dependencies.tracing-subscriber]
 default-features = false
-features = ["json", "env-filter", "chrono", "default"]
 version = "0.3.20"
 
 [workspace.dependencies.url]
 default-features = false
-features = ["serde"]
 version = "2.5.4"
 
 [workspace.dependencies.utoipa]
 default-features = false
-features = ["default", "uuid", "chrono"]
 version = "5.4.0"
 
 [workspace.dependencies.uuid]
@@ -158,7 +121,6 @@ version = "1.17.0"
 
 [workspace.dependencies.vaultrs]
 default-features = false
-features = ["rustls"]
 version = "0.7.4"
 
 [workspace.lints.clippy]

apis/cloud/filez/apps/backend/images/cargo-workspace-docker.toml

@@ -1,6 +1,8 @@
 #!/bin/bash
 set -euo pipefail
 
+mpm tools cargo-workspace-docker
+
 export SERVICE_NAME="filez-apps-backend-metadata"
 
 export BAKE_ARGS="${BAKE_ARGS:-default} --allow=fs.read=/home/paul/projects/mows"