feat: Add Docker, uv, rust-toolchain for reproducible builds

- Add Dockerfile with multi-stage build (CUDA + Rust + Python)
- Add docker-compose.yml for dev/test/gpu services
- Add rust-toolchain.toml pinning nightly-2024-12-01
- Add pyproject.toml with uv for Python dependency management
- Commit Cargo.lock and uv.lock for reproducible builds
- Update CI to verify Docker build works
- Update README with Docker quickstart

Relates to #10 (GPU acceleration)

Author: masoud@anyscale.com

.dockerignore

@@ -0,0 +1,46 @@
+# Git
+.git
+.gitignore
+
+# Build artifacts
+target/
+zkml/target/
+*.pyc
+__pycache__/
+.pytest_cache/
+*.egg-info/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Params (large files, should be mounted or downloaded)
+params/
+params_kzg/
+params_ipa/
+*.params
+
+# Proofs (generated at runtime)
+proof
+proof_output/
+*.bin
+
+# Virtual environments
+.venv/
+venv/
+env/
+
+# Documentation
+docs/
+*.md
+!README.md
+
+# CI/CD
+.github/
+

.github/workflows/ci.yml

@@ -19,9 +19,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      # Use rust-toolchain.toml for version (pinned in repo)
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@nightly
+        uses: dtolnay/rust-toolchain@master
         with:
+          toolchain: nightly-2024-12-01
           components: rustfmt, clippy
 
       - name: Cache cargo registry
@@ -64,6 +66,52 @@ jobs:
         run: cargo clippy --lib -- -W clippy::all || echo "::warning::Clippy warnings found (non-blocking)"
         continue-on-error: true
 
-  # Note: AWS tests are intentionally excluded from CI to save costs.
-  # Run them manually with: cd tests/aws && python gpu_test.py
+  # Docker build test - ensures Dockerfile works
+  docker-build:
+    name: Docker Build
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
+      - name: Build dev image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          target: dev
+          push: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: distributed-zkml:dev
+
+  # Python dependency check
+  python-deps:
+    name: Python Dependencies
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+        with:
+          version: "latest"
+      
+      - name: Set up Python
+        run: uv python install 3.11
+      
+      - name: Install dependencies
+        run: uv sync
+      
+      - name: Check Python imports work
+        run: |
+          uv run python -c "import ray; print(f'Ray version: {ray.__version__}')"
+          uv run python -c "from python.rust_prover import prove_chunk; print('rust_prover imports OK')"
 
+  # Note: AWS/GPU tests are intentionally excluded from CI to save costs.
+  # Run them manually on GPU instances.

.gitignore

@@ -1,6 +1,6 @@
 # Rust
 target/
-Cargo.lock
+# Cargo.lock is committed for reproducible builds (removed from ignore)
 
 # Python
 __pycache__/