chore(common): add CI Cargo profile for faster test builds

coprocessor/fhevm-engine/Cargo.toml

@@ -101,3 +101,11 @@ overflow-checks = false
 [profile.release]
 opt-level = 3
 lto = "fat"
+
+# CI profile for faster builds in CI/testing (significantly faster compile+link)
+# Use with: cargo build --profile ci
+[profile.ci]
+inherits = "release"
+opt-level = 2
+lto = false
+codegen-units = 16

coprocessor/fhevm-engine/gw-listener/Dockerfile

@@ -15,6 +15,8 @@ RUN npm install && \
 # Stage 1: Build GW Listener
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -29,17 +31,18 @@ COPY .git/HEAD ./coprocessor/fhevm-engine/BUILD_ID
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build gw_listener binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true BUILD_ID=$(cat BUILD_ID) cargo build --release -p gw-listener
+    SQLX_OFFLINE=true BUILD_ID=$(cat BUILD_ID) cargo build --profile=${CARGO_PROFILE} -p gw-listener
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/gw_listener /usr/local/bin/gw_listener
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/gw_listener /usr/local/bin/gw_listener
 
 USER fhevm:fhevm
 

coprocessor/fhevm-engine/host-listener/Dockerfile

@@ -15,6 +15,8 @@ RUN npm install && HARDHAT_NETWORK=hardhat npm run deploy:emptyProxies && npx ha
 # Stage 1: Build Host Listener
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -28,18 +30,19 @@ COPY .git/HEAD ./coprocessor/fhevm-engine/BUILD_ID
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build host_listener binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true BUILD_ID=$(cat BUILD_ID) cargo build --release -p host-listener
+    SQLX_OFFLINE=true BUILD_ID=$(cat BUILD_ID) cargo build --profile=${CARGO_PROFILE} -p host-listener
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/host_listener /usr/local/bin/host_listener
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/host_listener_poller /usr/local/bin/host_listener_poller
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/host_listener /usr/local/bin/host_listener
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/host_listener_poller /usr/local/bin/host_listener_poller
 
 USER fhevm:fhevm
 

coprocessor/fhevm-engine/sns-worker/Dockerfile

@@ -1,6 +1,8 @@
 # Stage 1: Build SNS Worker
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -11,17 +13,18 @@ COPY gateway-contracts/rust_bindings ./gateway-contracts/rust_bindings
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build sns_executor binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true cargo build --release -p sns-worker
+    SQLX_OFFLINE=true cargo build --profile=${CARGO_PROFILE} -p sns-worker
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/sns_worker /usr/local/bin/sns_worker
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/sns_worker /usr/local/bin/sns_worker
 
 USER fhevm:fhevm
 

coprocessor/fhevm-engine/stress-test-generator/Dockerfile

@@ -21,6 +21,8 @@ RUN cp .env.example .env \
 # Stage 1: Build Stress-Tool
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -33,17 +35,18 @@ COPY --from=contract_builder /app/host-contracts/artifacts/contracts /app/host-c
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build stress_generator binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true cargo build --release -p stress-test-generator
+    SQLX_OFFLINE=true cargo build --profile=${CARGO_PROFILE} -p stress-test-generator
 
 # Stage 2: Runtime image
 FROM cgr.dev/chainguard/glibc-dynamic:latest AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/stress_generator /usr/local/bin/stress_generator
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/stress_generator /usr/local/bin/stress_generator
 USER fhevm:fhevm
 
 CMD ["/usr/local/bin/stress_generator"]

coprocessor/fhevm-engine/tfhe-worker/Dockerfile

@@ -1,6 +1,8 @@
 # Stage 1: Build TFHE Worker
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -11,17 +13,18 @@ COPY gateway-contracts/rust_bindings ./gateway-contracts/rust_bindings
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build tfhe_worker binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true cargo build --release -p tfhe-worker
+    SQLX_OFFLINE=true cargo build --profile=${CARGO_PROFILE} -p tfhe-worker
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/tfhe_worker /usr/local/bin/tfhe_worker
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/tfhe_worker /usr/local/bin/tfhe_worker
 
 USER fhevm:fhevm
 

coprocessor/fhevm-engine/transaction-sender/Dockerfile

@@ -1,6 +1,8 @@
 # Stage 1: Build Transaction Sender
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -11,17 +13,18 @@ COPY gateway-contracts/rust_bindings ./gateway-contracts/rust_bindings
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build transaction_sender binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true cargo build --release -p transaction-sender
+    SQLX_OFFLINE=true cargo build --profile=${CARGO_PROFILE} -p transaction-sender
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/transaction_sender /usr/local/bin/transaction_sender
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/transaction_sender /usr/local/bin/transaction_sender
 
 USER fhevm:fhevm
 

coprocessor/fhevm-engine/zkproof-worker/Dockerfile

@@ -1,6 +1,8 @@
 # Stage 1: Build ZK Proof Worker
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:1.91.0 AS builder
 
+ARG CARGO_PROFILE=release
+
 USER root
 
 WORKDIR /app
@@ -11,17 +13,18 @@ COPY gateway-contracts/rust_bindings ./gateway-contracts/rust_bindings
 
 WORKDIR /app/coprocessor/fhevm-engine
 
-# Build zkproof_worker binary
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     cargo fetch && \
-    SQLX_OFFLINE=true cargo build --release -p zkproof-worker
+    SQLX_OFFLINE=true cargo build --profile=${CARGO_PROFILE} -p zkproof-worker
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/release/zkproof_worker /usr/local/bin/zkproof_worker
+COPY --from=builder --chown=fhevm:fhevm /app/coprocessor/fhevm-engine/target/${CARGO_PROFILE}/zkproof_worker /usr/local/bin/zkproof_worker
 
 USER fhevm:fhevm
 

kms-connector/Cargo.toml

@@ -102,3 +102,11 @@ serial_test = "3.2.0"
 testcontainers = "=0.24.0"
 toml = { version = "=0.9.8", default-features = true }
 tracing-test = { version = "=0.2.5", default-features = false }
+
+# CI profile for faster builds in CI/testing (significantly faster compile+link)
+# Use with: cargo build --profile ci
+[profile.ci]
+inherits = "release"
+opt-level = 2
+lto = false
+codegen-units = 16

kms-connector/crates/gw-listener/Dockerfile

@@ -6,7 +6,7 @@ ARG RUST_IMAGE_VERSION
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:${RUST_IMAGE_VERSION} AS builder
 
 # The profile used to run `cargo build`
-ARG LTO_RELEASE=release
+ARG CARGO_PROFILE=release
 
 # Use root user for build stage
 USER root
@@ -24,14 +24,16 @@ COPY kms-connector ./kms-connector
 WORKDIR /app/kms-connector
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     git config --global --add safe.directory /app && \
-    cargo build --profile=${LTO_RELEASE} -p gw-listener
+    cargo build --profile=${CARGO_PROFILE} -p gw-listener
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/kms-connector/target/release/gw-listener /app/kms-connector/bin/gw-listener
+COPY --from=builder --chown=fhevm:fhevm /app/kms-connector/target/${CARGO_PROFILE}/gw-listener /app/kms-connector/bin/gw-listener
 
 USER fhevm:fhevm
 

kms-connector/crates/kms-worker/Dockerfile

@@ -6,7 +6,7 @@ ARG RUST_IMAGE_VERSION
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:${RUST_IMAGE_VERSION} AS builder
 
 # The profile used to run `cargo build`
-ARG LTO_RELEASE=release
+ARG CARGO_PROFILE=release
 
 # Use root user for build stage
 USER root
@@ -24,14 +24,16 @@ COPY kms-connector ./kms-connector
 WORKDIR /app/kms-connector
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     git config --global --add safe.directory /app && \
-    cargo build --profile=${LTO_RELEASE} -p kms-worker
+    cargo build --profile=${CARGO_PROFILE} -p kms-worker
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/kms-connector/target/release/kms-worker /app/kms-connector/bin/kms-worker
+COPY --from=builder --chown=fhevm:fhevm /app/kms-connector/target/${CARGO_PROFILE}/kms-worker /app/kms-connector/bin/kms-worker
 
 USER fhevm:fhevm
 

kms-connector/crates/tx-sender/Dockerfile

@@ -6,7 +6,7 @@ ARG RUST_IMAGE_VERSION
 FROM ghcr.io/zama-ai/fhevm/gci/rust-glibc:${RUST_IMAGE_VERSION} AS builder
 
 # The profile used to run `cargo build`
-ARG LTO_RELEASE=release
+ARG CARGO_PROFILE=release
 
 # Use root user for build stage
 USER root
@@ -24,14 +24,16 @@ COPY kms-connector ./kms-connector
 WORKDIR /app/kms-connector
 RUN --mount=type=cache,target=/usr/local/cargo/registry,sharing=locked \
     git config --global --add safe.directory /app && \
-    cargo build --profile=${LTO_RELEASE} -p tx-sender
+    cargo build --profile=${CARGO_PROFILE} -p tx-sender
 
 # Stage 2: Runtime image
 FROM cgr.dev/zama.ai/glibc-dynamic:15.2.0 AS prod
 
+ARG CARGO_PROFILE=release
+
 COPY --from=builder /etc/group /etc/group
 COPY --from=builder /etc/passwd /etc/passwd
-COPY --from=builder --chown=fhevm:fhevm /app/kms-connector/target/release/tx-sender /app/kms-connector/bin/tx-sender
+COPY --from=builder --chown=fhevm:fhevm /app/kms-connector/target/${CARGO_PROFILE}/tx-sender /app/kms-connector/bin/tx-sender
 
 USER fhevm:fhevm
 

test-suite/fhevm/docker-compose/coprocessor-docker-compose.yml

@@ -5,6 +5,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/db-migration/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -25,6 +27,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/host-listener/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -49,6 +53,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/host-listener/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -72,6 +78,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/gw-listener/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -103,6 +111,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/tfhe-worker/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -129,6 +139,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/zkproof-worker/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -153,6 +165,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/sns-worker/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to:
@@ -190,6 +204,8 @@ services:
     build:
       context: ../../..
       dockerfile: coprocessor/fhevm-engine/transaction-sender/Dockerfile
+      args:
+        CARGO_PROFILE: ${CARGO_PROFILE:-release}
       cache_from:
         - type=gha
       cache_to: