👷 GitHub action to push `ghcr/quay` container

[neon-mmd]

What would you like to share?

Work Expected From The Issue

Due to recent changes on the docker pull rate for unauthorized users, implement a github action to push a docker container to both quay and ghcr as well.

The issue expects the following folder to be changed/modified:

• src/.github/worflows/

Note

All the files that are expected to be changed are located under the codebase (websurfx directory).

Reason Behind These Changes

The reason behind having these changes is to allow the user to have the choice between what container registry to pull the latest stable build of websurfx from.

Do you want to work on this issue?

None

Additional information

No response

[github-actions]

The issue has been unlocked and is now ready for dev. If you would like to work on this issue, you can comment to have it assigned to you. You can learn more in our contributing guide https://github.com/neon-mmd/websurfx/blob/rolling/CONTRIBUTING.md

[neon-mmd]

@inetol @scottc943
Sorry for the ping.
Are you interested to work on this issue? Let us know 🙂

[Ds886]

Hello,

Not sure if related but recently wanted to try the project with unstable builds and had to fix the docker file in the process changes made to build the Dockerfile presented in the repo main folder

Changes can be found
https://github.com/Ds886/websurfx
Test build
https://github.com/Ds886/websurfx/actions/runs/17491210917/job/49681283114
Main changes were:

1. adding bin section to cargo.toml
2. Updating the rust image
3. Changed from libressl to openssl and installed the static libraries as now they are split

See the below diff for the details
Hope you find it helpful

diff --git a/Cargo.toml b/Cargo.toml
index f7b3938..af1d35d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -6,6 +6,10 @@ description = "An open-source alternative to Searx that provides clean, ad-free,
 repository = "https://github.com/neon-mmd/websurfx"
 license = "AGPL-3.0"
 
+[[bin]]
+name = "websurfx"
+path = "src/main.rs"
+
 [dependencies]
 rayon = "1.10.0"
 arc-swap = "1.7.1"
diff --git a/Dockerfile b/Dockerfile
index d8724f4..68f14b0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
-FROM --platform=$BUILDPLATFORM rust:1.78.0-alpine3.18 AS chef
+FROM --platform=$BUILDPLATFORM rust:1.89.0-alpine3.22 AS chef
 # We only pay the installation cost once,
 # it will be cached from the second build onwards
-RUN apk add --no-cache alpine-sdk musl-dev g++ make libcrypto3 libressl-dev upx perl build-base
+RUN apk add --no-cache alpine-sdk musl-dev g++ make libcrypto3  upx perl build-base  openssl-dev openssl-libs-static
 RUN cargo install cargo-chef --locked
 
 WORKDIR /app

I used this workflow to test build it

diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
new file mode 100644
index 0000000..a859b94
--- /dev/null
+++ b/.github/workflows/push-docker.yml
@@ -0,0 +1,57 @@
+---
+# .github/workflows/docker-build-on-tag.yml
+name: Docker Image CI on Tag
+
+on:
+  push:
+    branches:
+      - rolling
+    tags:
+      - 'v*.*.*' # Trigger on tags like v1.0.0, v1.2.3, etc.
+
+jobs:
+  build_and_push_docker_image:
+    runs-on: ubuntu-latest
+    environment: build
+    permissions:
+      contents: read
+      packages: write # Required if pushing to GitHub Packages
+    
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Extract Docker metadata (tags, labels) for Branch
+        id: meta_branch
+        uses: docker/metadata-action@v5
+        with:
+          images: dash886/websurfx
+          tags: |
+            # Use the branch name as a Docker tag (e.g., 'main' or 'develop')
+            type=raw,value=${{ github.ref_name }}
+            # Also tag with 'latest' if on the 'main' branch
+            type=raw,value=latest,enable=${{ github.ref_name == 'rolling' }}
+            # Optionally, tag with the short commit SHA for traceability
+            type=sha,format=short,prefix=sha-
+          labels: |
+            org.opencontainers.image.source=${{ github.event.repository.html_url }}
+            org.opencontainers.image.revision=${{ github.sha }}
+            org.opencontainers.image.branch=${{ github.ref_name }}
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: . # Path to your Dockerfile's context (usually the root of the repo)
+          push: true
+          tags: ${{ steps.meta_branch.outputs.tags }}
+          labels: ${{ steps.meta_branch.outputs.labels }}
+          cache-from: type=gha # Cache layers using GitHub Actions cache
+          cache-to: type=gha,mode=max # Store cache layers