feat(ci,Dockerfile): add caching of build directories (#14)

* feat(ci,Dockerfile): add caching of build directories

* chore: update python:3.12.5-alpine docker digest to aeff643

* chore: update python:3.12.5-alpine docker digest to bb5d0ac

* chore: update python docker tag to v3.12.6

* chore: update python:3.12.6-alpine docker digest to 7130f75

---------

Co-authored-by: Renovate Bot <[email protected]>

Author: JuniorJPDJ

.github/workflows/docker-publish.yml

@@ -46,6 +46,46 @@ jobs:
             type=ref,event=tag
             type=raw,value=latest,enable={{is_default_branch}}
 
+      - name: Setup buildx mount cache
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
+        with:
+          path: |
+            home-cache-386
+            home-cache-amd64
+            home-cache-armv6
+            home-cache-armv7
+            home-cache-arm64
+          key: buildx-mount-cache-${{ github.sha }}
+          restore-keys: |
+            buildx-mount-cache-
+
+      - name: Inject buildx mount cache into docker
+        uses: reproducible-containers/buildkit-cache-dance@5b6db76d1da5c8b307d5d2e0706d266521b710de # v3.1.2
+        with:
+          cache-map: |
+            {
+              "home-cache-386": {
+                "target": "/root/.cache",
+                "id": "home-cache-linux/386"
+              },
+              "home-cache-amd64": {
+                "target": "/root/.cache",
+                "id": "home-cache-linux/amd64"
+              },
+              "home-cache-armv6": {
+                "target": "/root/.cache",
+                "id": "home-cache-linux/arm/v6"
+              },
+              "home-cache-armv7": {
+                "target": "/root/.cache",
+                "id": "home-cache-linux/arm/v7"
+              },
+              "home-cache-arm64": {
+                "target": "/root/.cache",
+                "id": "home-cache-linux/arm64"
+              }
+            }
+
       - name: Build and push Docker image
         id: build-and-push
         uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0

Dockerfile

@@ -1,18 +1,21 @@
-FROM        python:3.12.5-alpine@sha256:c2f41e6a5a67bc39b95be3988dd19fbd05d1b82375c46d9826c592cca014d4de
+FROM        python:3.12.6-alpine@sha256:7130f75b1bb16c7c5d802782131b4024fe3d7a87ce7d936e8948c2d2e0180bc4
 
 # renovate: datasource=repology depName=alpine_3_20/fuse versioning=loose
 ARG         FUSE_VERSION="2.9.9-r5"
 
+ARG         TARGETPLATFORM
+
 WORKDIR     /app
 
 ADD         requirements.txt .
 
-RUN         apk add --no-cache \
+RUN         --mount=type=cache,sharing=locked,target=/root/.cache,id=home-cache-$TARGETPLATFORM \
+            apk add --no-cache \
               fuse=${FUSE_VERSION} \
             && \
             sed -i 's/#user_allow_other/user_allow_other/g' /etc/fuse.conf && \
             pip install -r requirements.txt && \
-            rm -rf /root/.cache /root/.cargo
+            chown -R nobody:nogroup /app
 
 COPY        --chown=nobody:nogroup . .