feat: docker containerization and example docker-compose

Author: JuniorJPDJ

.dockerignore

@@ -0,0 +1,14 @@
+.vscode
+.idea
+test
+objectdb
+venv/
+log.txt
+benchmark
+renovate.json
+README.md
+.travis.yml
+.github
+.flake8
+.gitignore
+.git

.github/workflows/docker-publish.yml

@@ -0,0 +1,59 @@
+name: Docker build
+
+on:
+  push:
+    branches:
+      - dev
+  workflow_dispatch:
+
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+
+      # Workaround: https://github.com/docker/build-push-action/issues/461
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3
+
+      - name: Log into registry ${{ env.REGISTRY }}
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository }}
+          tags: |
+            type=schedule
+            type=ref,event=branch
+            type=ref,event=tag
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@31159d49c0d4756269a0940a750801a1ea5d7003 # v6
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/386,linux/arm/v6,linux/arm/v7,linux/arm64
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

Dockerfile

@@ -0,0 +1,22 @@
+FROM        python:3.12.4-alpine@sha256:dc095966439c68283a01dde5e5bc9819ba24b28037dddd64ea224bf7aafc0c82
+
+# renovate: datasource=repology depName=alpine_3_20/fuse versioning=loose
+ARG         FUSE_VERSION="2.9.9-r5"
+
+WORKDIR     /app
+
+ADD         requirements.txt .
+
+RUN         apk add --no-cache \
+              fuse=${FUSE_VERSION} \
+            && \
+            sed -i 's/#user_allow_other/user_allow_other/g' /etc/fuse.conf && \
+            pip install -r requirements.txt && \
+            rm -rf /root/.cache /root/.cargo
+
+COPY        --chown=nobody:nogroup . .
+
+USER        nobody
+ENV         FUSE_LIBRARY_PATH=/usr/lib/libfuse.so.2
+
+ENTRYPOINT  [ "python", "./ziprofs.py" ]

docker-compose.yaml

@@ -0,0 +1,21 @@
+services:
+  ziprofs:
+    # build: .
+    image: ghcr.io/openscopeproject/ziprofs
+    privileged: true
+    volumes:
+      - # Root/source directory
+        source: ./data/root
+        target: /app/root
+        type: bind
+      - # Mountpoint/target directory
+        source: ./data/mnt
+        target: /app/mnt
+        type: bind
+        bind:
+          propagation: rshared
+    command:
+      - /app/root
+      - /app/mnt
+      - -o
+      - allowother,foreground

renovate.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:best-practices",
+    ":semanticCommits",
+    ":semanticCommitScopeDisabled",
+    "docker:enableMajor",
+    "customManagers:dockerfileVersions"
+  ],
+  "packageRules": [
+    {
+      "description": "Group OS packages to avoid build errors if more than one package is updated and previous version is not present in repo already",
+      "matchDatasources": [
+        "repology"
+      ],
+      "groupName": "OS Packages"
+    }
+  ],
+  "forkProcessing": "enabled"
+}

requirements.txt

@@ -1 +1 @@
-fusepy
+fusepy==3.0.1