Integrate docker-slim for waaaaaaaay smaller run images

.gitlab-ci/docker-ros.yml

@@ -17,6 +17,8 @@ variables:
   IMAGE_TAG:                  latest                                  # Image tag of run image
   DEV_IMAGE_NAME:             ${IMAGE_NAME}                           # Image name of dev image
   DEV_IMAGE_TAG:              ${IMAGE_TAG}-dev                        # Image tag of dev image
+  SLIM_IMAGE_NAME:            ${IMAGE_NAME}                           # Image name of slim run image
+  SLIM_IMAGE_TAG:             ${IMAGE_TAG}-slim                       # Image tag of slim run image
   BUILD_CONTEXT:              .                                       # Build context of Docker build process
   REGISTRY:                   ${CI_REGISTRY}                          # Docker registry to push images to
   REGISTRY_USER:              ${CI_REGISTRY_USER}                     # Docker registry username
@@ -47,19 +49,26 @@ variables:
 
   _RUN_IMAGE:             ${IMAGE_NAME}:${IMAGE_TAG}
   _DEV_IMAGE:             ${DEV_IMAGE_NAME}:${DEV_IMAGE_TAG}
+  _SLIM_IMAGE:            ${SLIM_IMAGE_NAME}:${SLIM_IMAGE_TAG}
 
   _IMAGE_DEV_CI:          ${_DEV_IMAGE}_${CI_COMMIT_REF_SLUG}_ci
   _IMAGE_RUN_CI:          ${_RUN_IMAGE}_${CI_COMMIT_REF_SLUG}_ci
+  _IMAGE_SLIM_CI:         ${_SLIM_IMAGE}_${CI_COMMIT_REF_SLUG}_ci
   _IMAGE_DEV_CI_AMD64:    ${_IMAGE_DEV_CI}-amd64
   _IMAGE_DEV_CI_ARM64:    ${_IMAGE_DEV_CI}-arm64
   _IMAGE_RUN_CI_AMD64:    ${_IMAGE_RUN_CI}-amd64
   _IMAGE_RUN_CI_ARM64:    ${_IMAGE_RUN_CI}-arm64
-  _IMAGE_DEV_LATEST:      ${DEV_IMAGE_NAME}:latest-dev
+  _IMAGE_SLIM_CI_AMD64:   ${_IMAGE_SLIM_CI}-amd64
+  _IMAGE_SLIM_CI_ARM64:   ${_IMAGE_SLIM_CI}-arm64
+  _IMAGE_DEV_LATEST:      ${DEV_IMAGE_NAME}:latest-dev # TODO: is this a bug here that DEV_IMAGE_TAG is not used?
   _IMAGE_RUN_LATEST:      ${IMAGE_NAME}:latest
+  _IMAGE_SLIM_LATEST:     ${SLIM_IMAGE_NAME}:latest-slim
   _IMAGE_DEV_TARGET_TAG:  ${_DEV_IMAGE}-${CI_COMMIT_TAG}
   _IMAGE_RUN_TARGET_TAG:  ${_RUN_IMAGE}-${CI_COMMIT_TAG}
-  _IMAGE_DEV_TAG:         ${DEV_IMAGE_NAME}:${CI_COMMIT_TAG}-dev
+  _IMAGE_SLIM_TARGET_TAG: ${_SLIM_IMAGE}-${CI_COMMIT_TAG}
+  _IMAGE_DEV_TAG:         ${DEV_IMAGE_NAME}:${CI_COMMIT_TAG}-dev # TODO: is this a bug here that DEV_IMAGE_TAG is not used?
   _IMAGE_RUN_TAG:         ${IMAGE_NAME}:${CI_COMMIT_TAG}
+  _IMAGE_SLIM_TAG:        ${SLIM_IMAGE_NAME}:${CI_COMMIT_TAG}-slim
 
   GIT_SUBMODULE_STRATEGY: recursive
   DOCKER_DRIVER: overlay2
@@ -71,19 +80,20 @@ stages:
   - Build dev Images
   - Build run Images
   - Test ROS Industrial CI
+  - Slim Images
   - Push Multi-Arch Images
 
 
 default:
-  image: docker:20.10.22-git
+  image: docker:20.10.22-git # TODO: upgrade?
   services:
     - docker:20.10.22-dind
   tags:
     - privileged
     - amd64
   before_script:
     - echo -e "section_start:`date +%s`:setup_section[collapsed=true]\r\e[0K[docker-ros] Setup docker-ros"
-    - apk add bash
+    - apk add --update bash
     - cd ${BUILD_CONTEXT}
     - |-
       if [[ ! -d docker/docker-ros ]]; then
@@ -168,6 +178,7 @@ run-arm64:
 
 
 .test:
+  stage: Test ROS Industrial CI
   variables:
     UPSTREAM_WORKSPACE: ${BUILD_CONTEXT}/.repos
     TARGET_WORKSPACE: ${BUILD_CONTEXT}
@@ -186,7 +197,6 @@ run-arm64:
   script: .industrial_ci/gitlab.sh
 
 Test dev-amd64:
-  stage: Test ROS Industrial CI
   extends: .test
   needs:
     - job: dev-amd64
@@ -197,7 +207,6 @@ Test dev-amd64:
     _PLATFORM: amd64
 
 Test dev-arm64:
-  stage: Test ROS Industrial CI
   extends: .test
   tags: [privileged, arm64]
   needs:
@@ -209,7 +218,6 @@ Test dev-arm64:
     _PLATFORM: arm64
 
 Test run-amd64:
-  stage: Test ROS Industrial CI
   extends: .test
   needs:
     - job: run-amd64
@@ -220,7 +228,6 @@ Test run-amd64:
     _PLATFORM: amd64
 
 Test run-arm64:
-  stage: Test ROS Industrial CI
   extends: .test
   needs:
     - job: run-arm64
@@ -231,6 +238,55 @@ Test run-arm64:
     _PLATFORM: arm64
 
 
+.slim:
+  stage: Slim Images
+  before_script:
+    - apk add --update --upgrade curl tar
+    - curl -L -o ds.tar.gz ${SLIM_DOWNLOAD_URL}
+    - tar -xvf ds.tar.gz
+    - cd dist_linux*
+    - docker login -u ${REGISTRY_USER} -p ${REGISTRY_PASSWORD} ${REGISTRY}
+    - docker pull ${FAT_IMAGE}
+  script:
+    - ./slim build --sensor-ipc-mode proxy --target ${FAT_IMAGE} --tag ${SLIM_IMAGE} --continue-after=10 --show-clogs --http-probe=false
+    - docker push ${SLIM_IMAGE}
+  artifacts:
+    expire_in: 1 day
+    paths:
+      - slim.report.json
+
+Slim run-amd64:
+  stage: Slim Images
+  extends: .slim
+  needs:
+    - job: run-amd64
+      optional: true
+    - job: Test run-amd64
+      optional: true
+  rules:
+    - if: $PLATFORM =~ /.*amd64.*/ && $TARGET =~ /.*run.*/
+  variables:
+    FAT_IMAGE: ${_IMAGE_RUN_CI_AMD64}
+    SLIM_IMAGE: ${_IMAGE_SLIM_CI_AMD64}
+    SLIM_DOWNLOAD_URL: "https://github.com/slimtoolkit/slim/releases/download/1.40.11/dist_linux.tar.gz"
+
+Slim run-arm64:
+  stage: Slim Images
+  extends: .slim
+  tags: [privileged, arm64]
+  needs:
+    - job: run-arm64
+      optional: true
+    - job: Test run-arm64
+      optional: true
+  rules:
+    - if: $PLATFORM =~ /.*arm64.*/ && $TARGET =~ /.*run.*/
+  variables:
+    FAT_IMAGE: ${_IMAGE_RUN_CI_ARM64}
+    SLIM_IMAGE: ${_IMAGE_SLIM_CI_ARM64}
+    SLIM_DOWNLOAD_URL: "https://github.com/slimtoolkit/slim/releases/download/1.40.11/dist_linux_arm64.tar.gz"
+
+
 .push:
   needs:
     - job: dev-amd64
@@ -249,6 +305,10 @@ Test run-arm64:
       optional: true
     - job: Test run-arm64
       optional: true
+    - job: Slim run-amd64
+      optional: true
+    - job: Slim run-arm64
+      optional: true
   rules:
     - if: $PLATFORM == '' || $TARGET == ''
       when: never