Release/2.42.0 to latest

.circleci/build/build.Dockerfile

@@ -0,0 +1,38 @@
+FROM node:18.18-alpine
+
+# runtime args and environment variables
+ARG DIST=RedisInsight.tar.gz
+ARG NODE_ENV=production
+ARG RI_SEGMENT_WRITE_KEY
+ENV RI_SEGMENT_WRITE_KEY=${RI_SEGMENT_WRITE_KEY}
+ENV NODE_ENV=${NODE_ENV}
+ENV RI_SERVE_STATICS=true
+ENV RI_BUILD_TYPE='DOCKER_ON_PREMISE'
+ENV RI_APP_FOLDER_ABSOLUTE_PATH='/data'
+
+# this resolves CVE-2023-5363
+# TODO: remove this line once we update to base image that doesn't have this vulnerability
+RUN apk update && apk upgrade --no-cache libcrypto3 libssl3
+
+# set workdir
+WORKDIR /usr/src/app
+
+# copy artifacts built in previous stage to this one
+ADD $DIST /usr/src/app/redisinsight
+RUN ls -la /usr/src/app/redisinsight
+
+# folder to store local database, plugins, logs and all other files
+RUN mkdir -p /data && chown -R node:node /data
+
+# copy the docker entry point script and make it executable
+COPY --chown=node:node ./docker-entry.sh ./
+RUN chmod +x docker-entry.sh
+
+# since RI is hard-code to port 5000, expose it from the container
+EXPOSE 5000
+
+# don't run the node process as root
+USER node
+
+# serve the application 🚀
+ENTRYPOINT ["./docker-entry.sh", "node", "redisinsight/api/dist/src/main"]

.circleci/redisstack/build_modules.sh → .circleci/build/build_modules.sh

@@ -2,12 +2,25 @@
 set -e
 
 PLATFORM=${PLATFORM:-'linux'}
-ELECTRON_VERSION=$(cat electron/version)
 ARCH=${ARCH:-'x64'}
+LIBC=${LIBC:-''}
 #FILENAME="RedisInsight-$PLATFORM.$VERSION.$ARCH.zip"
-FILENAME="RedisInsight-web-$PLATFORM.$ARCH.tar.gz"
+FILENAME="RedisInsight-web-$PLATFORM"
+if [ ! -z $LIBC ]
+then
+  FILENAME="$FILENAME-$LIBC.$ARCH.tar.gz"
+  export npm_config_target_libc="$LIBC"
+else
+  FILENAME="$FILENAME.$ARCH.tar.gz"
+fi
+
+echo "Building node modules..."
+echo "Platform: $PLATFORM"
+echo "Arch: $ARCH"
+echo "Libc: $LIBC"
+echo "npm target libc: $npm_config_target_libc"
+echo "Filname: $FILENAME"
 
-# reinstall backend prod dependencies only (optimise space)
 rm -rf redisinsight/api/node_modules
 
 npm_config_arch="$ARCH" \
@@ -23,13 +36,13 @@ rm -rf redisinsight/build.zip
 
 cp LICENSE ./redisinsight
 
-cd redisinsight && tar -czvf build.tar.gz \
+cd redisinsight && tar -czf build.tar.gz \
 --exclude="api/node_modules/**/build/node_gyp_bins/python3" \
 api/node_modules \
 api/dist \
 ui/dist \
 LICENSE \
 && cd ..
 
-mkdir -p release/redisstack
-cp redisinsight/build.tar.gz release/redisstack/"$FILENAME"
+mkdir -p release/web
+cp redisinsight/build.tar.gz release/web/"$FILENAME"

.circleci/build/manual-build-validate.js

@@ -17,6 +17,9 @@ const whitelist = {
   'windows': {
     'nsis': 1,
     'nsis:x64': 1,
+  },
+  'docker': {
+    'all': 1,
   }
 };
 

.circleci/build/release-docker.sh

@@ -0,0 +1,63 @@
+#!/bin/bash
+set -e
+
+HELP="Args:
+-v - Semver (2.42.0)
+-d - Build image repository (Ex: -d redisinsight)
+-r - Target repository (Ex: -r redis/redisinsight)
+"
+
+while getopts "v:d:r:h:" opt; do
+  case $opt in
+    v) VERSION="$OPTARG";;
+    d) DEV_REPO="$OPTARG";;
+    r) RELEASE_REPO="$OPTARG";;
+    h) echo "$HELP"; exit 0;;
+    ?) echo "$HELP" >&2; exit 1 ;;
+  esac
+done
+
+V_ARR=( ${VERSION//./ } )
+TAGS[0]=$VERSION
+TAGS[1]="${V_ARR[0]}.${V_ARR[1]}"
+TAGS[2]="latest"
+
+DEV_IMAGE_AMD64=$DEV_REPO:amd64
+DEV_IMAGE_ARM64=$DEV_REPO:arm64
+RELEASE_IMAGE_AMD64=$RELEASE_REPO:$VERSION-amd64
+RELEASE_IMAGE_ARM64=$RELEASE_REPO:$VERSION-arm64
+
+echo "
+  TAGS: [${TAGS[0]}, ${TAGS[1]}, ${TAGS[2]}]
+  DEV_REPO: $DEV_REPO
+  RELEASE_REPO: $RELEASE_REPO
+
+  DEV_IMAGE_AMD64: $DEV_IMAGE_AMD64
+  DEV_IMAGE_ARM64: $DEV_IMAGE_ARM64
+
+  RELEASE_IMAGE_AMD64: $RELEASE_IMAGE_AMD64
+  RELEASE_IMAGE_ARM64: $RELEASE_IMAGE_ARM64
+"
+
+# Load images from tar archives
+docker rmi $DEV_IMAGE_AMD64 || true
+docker rmi $DEV_IMAGE_ARM64 || true
+docker load -i release/docker/docker-linux-alpine.amd64.tar
+docker load -i release/docker/docker-linux-alpine.arm64.tar
+
+echo "Push AMD64 image"
+docker tag $DEV_IMAGE_AMD64 $RELEASE_IMAGE_AMD64
+docker push $RELEASE_IMAGE_AMD64
+
+echo "Push ARM64 image"
+docker tag $DEV_IMAGE_ARM64 $RELEASE_IMAGE_ARM64
+docker push $RELEASE_IMAGE_ARM64
+
+for TAG in "${TAGS[@]}"; do
+    echo "Releasing: $RELEASE_REPO:$TAG"
+    docker manifest rm $RELEASE_REPO:$TAG || true
+    docker manifest create --amend "$RELEASE_REPO:$TAG" $RELEASE_IMAGE_AMD64 $RELEASE_IMAGE_ARM64
+    docker manifest push "$RELEASE_REPO:$TAG"
+done
+
+echo "Success"

.circleci/build/sum_sha256.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+set -e
+
+find ./release -type f -name '*.tar.gz' -execdir sh -c 'sha256sum "$1" > "$1.sha256"' _ {} \;