Build container using buildah

Author: hillu

.github/workflows/build.yml

@@ -301,3 +301,35 @@ jobs:
           files: laurel-*.tar.gz
           fail_on_unmatched_files: true
           draft: true
+
+  build-container:
+    runs-on: ubuntu-latest
+    needs:
+      - build-x86_64-musl
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
+        with:
+          merge-multiple: true
+          path: target
+      - name: Edit configuration
+        run: |
+          sed -e 's#^input = .*#input = "unix:/var/run/audispd_events"#' etc/laurel/config.toml
+      - uses: redhat-actions/buildah-build@v2
+        id: build-image
+        with:
+          image: laurel
+          tags: "latest ${{ github.ref_name }} ${{ github.sha }}"
+          containerfiles: ./Containerfile
+      - uses: redhat-actions/podman-login@v1
+        if:  ${{ github.ref_type == 'tag' }}
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: redhat-actions/push-to-registry@v2
+        if:  ${{ github.ref_type == 'tag' }}
+        with:
+          registry: ghcr.io/${{ github.repository_owner }}
+          image: ${{ steps.build-image.outputs.image }}
+          tags: ${{ steps.build-image.outputs.tags }}

Dockerfile Containerfile

@@ -1,6 +1,7 @@
-FROM gcr.io/distroless/static-debian11
+FROM gcr.io/distroless/static-debian12
 
-COPY laurel /usr/bin/laurel
+COPY target/x86_64-alpine-linux-musl/release/laurel /usr/bin/laurel
 COPY etc/laurel/config.toml /etc/laurel/config.toml
+
 ENTRYPOINT ["/usr/bin/laurel"]
 CMD ["--config", "/etc/laurel/config.toml"]