refactor(coprocessor): fix db-migration misconfigs

Author: tawadaa

.github/workflows/coprocessor-docker-build-db-migration.yml

@@ -10,7 +10,7 @@ on:
       - published
 
 concurrency:
-  group: fhevm-db-migration-${{ github.ref_name }}
+  group: db-migration-${{ github.ref_name }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
@@ -30,8 +30,8 @@ jobs:
           filters: |
             db-migration-files:
               - .github/workflows/coprocessor-docker-build-db-migration.yml
-              - coprocessor/fhevm-engine/fhevm-db/**
-  docker-fhevm-db-migration:
+              - coprocessor/fhevm-engine/db-migration/**
+  docker-db-migration:
     needs: check-changes
     if: ${{ needs.check-changes.outputs.changes-db-migration-files == 'true' || github.event_name == 'release' }}
     uses: zama-ai/ci-templates/.github/workflows/docker_common.yml@44333c96991d6747e0bef6a3308bfd98b20390f8 # main
@@ -48,5 +48,5 @@ jobs:
       push_image: true
       image-name: "fhevm/coprocessor/db-migration"
       generate-dev-image: false
-      docker-file: "fhevm-engine/fhevm-db/Dockerfile"
+      docker-file: "fhevm-engine/db-migration/Dockerfile"
       arm-build: true

coprocessor/fhevm-engine/coprocessor/docker-compose.yml

@@ -22,12 +22,20 @@ services:
     container_name: db-migration
     build:
       context: ../../.
-      dockerfile: fhevm-engine/fhevm-db/Dockerfile
+      dockerfile: fhevm-engine/db-migration/Dockerfile
     environment:
       DATABASE_URL: postgresql://postgres:postgres@db:5432/coprocessor
       TENANT_API_KEY: "a1503fb6-d79b-4e9e-826d-44cf262f3e05"
       ACL_CONTRACT_ADDRESS: "0x339EcE85B9E11a3A3AA557582784a15d7F82AAf2"
       INPUT_VERIFIER_ADDRESS: "0x69dE3158643e738a0724418b21a35FAA20CBb1c5"
+    command:
+      - /initialize_db.sh
+    healthcheck:
+      test: ["CMD-SHELL", "psql --version"]
+      interval: 15s
+      timeout: 5s
+      retries: 1
+      start_period: 5s
     volumes:
       - ../fhevm-keys:/fhevm-keys
     depends_on:

coprocessor/fhevm-engine/db-migration/Dockerfile

@@ -0,0 +1,50 @@
+# Stage 1: Build DB Migration
+FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.85.0 AS builder
+
+USER root
+
+# Install sqlx-cli
+RUN cargo install sqlx-cli --version 0.7.2 \
+    --no-default-features --features postgres --locked
+
+# Copy migrations and initialization script
+COPY fhevm-engine/ /fhevm-engine
+COPY proto/ /proto/
+COPY fhevm-engine/db-migration/initialize_db.sh /initialize_db.sh
+COPY fhevm-engine/db-migration/migrations /migrations
+
+WORKDIR /fhevm-engine
+# Build utils binary
+# Currently, this utils is used only for keys converting. 
+# Later on, it will be extended to replace initialize_db.sh completely
+RUN mkdir /fhevm-keys && \
+    cargo fetch && \
+    SQLX_OFFLINE=true cargo build --release -p coprocessor --bin utils
+
+# Stage 2: Runtime image
+FROM cgr.dev/chainguard/glibc-dynamic:latest AS runtime
+
+COPY --from=builder /lib/ /lib/
+COPY --from=builder /bin/ /bin/
+COPY --from=builder /usr/lib/ /usr/lib/
+COPY --from=builder /usr/bin/ /usr/bin/
+COPY --from=builder /usr/libexec/ /usr/libexec/
+COPY --from=builder /etc/group /etc/group
+COPY --from=builder /etc/passwd /etc/passwd
+COPY --from=builder --chown=fhevm:fhevm /home/fhevm /home/fhevm
+COPY --from=builder --chown=fhevm:fhevm /app /app
+
+COPY  --from=builder --chown=fhevm:fhevm /fhevm-engine/target/release/utils /usr/local/bin/utils
+COPY  --from=builder --chown=fhevm:fhevm /usr/local/cargo/bin/sqlx /usr/local/bin/sqlx
+COPY  --from=builder --chown=fhevm:fhevm /initialize_db.sh /initialize_db.sh
+COPY  --from=builder --chown=fhevm:fhevm /migrations /migrations
+COPY  --from=builder --chown=fhevm:fhevm /fhevm-keys /fhevm-keys
+
+USER fhevm:fhevm
+
+ENV PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:${PATH}"
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
+    CMD psql --version || exit 1
+
+ENTRYPOINT ["/bin/bash", "-c"]