calculator bot: add docker setup (#7606)

scripts/calculator-bot/Dockerfile

@@ -0,0 +1,121 @@
+# syntax=docker/dockerfile:1
+
+# The runtime glibc must be the same or newer.
+ARG UBUNTU_LIBS=22.04
+ARG GHC=9.6.3
+ARG CABAL=3.10.2.0
+ARG NODE=24
+
+# --------------------------------------------------------------------------- #
+# libsimplex
+# --------------------------------------------------------------------------- #
+FROM ubuntu:${UBUNTU_LIBS} AS libsimplex
+
+ARG GHC
+ARG CABAL
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        build-essential ca-certificates curl git libgmp3-dev libnuma-dev \
+        libsqlite3-dev libssl-dev llvm patchelf pkg-config zlib1g-dev && \
+    rm -rf /var/lib/apt/lists/*
+
+ENV BOOTSTRAP_HASKELL_NONINTERACTIVE=1 \
+    BOOTSTRAP_HASKELL_GHC_VERSION=${GHC} \
+    BOOTSTRAP_HASKELL_CABAL_VERSION=${CABAL} \
+    BOOTSTRAP_HASKELL_INSTALL_NO_STACK=true \
+    BOOTSTRAP_HASKELL_INSTALL_NO_STACK_HOOK=true
+RUN curl --proto '=https' --tlsv1.2 -sSf https://get-ghcup.haskell.org | sh
+ENV PATH="/root/.ghcup/bin:/root/.cabal/bin:$PATH"
+ENV CABAL_DIR=/root/.cabal
+
+WORKDIR /src
+COPY cabal.project simplex-chat.cabal README.md PRIVACY.md ./
+COPY scripts/cabal.project.local.linux ./cabal.project.local
+# The build script checks the export lists in these.
+COPY libsimplex.dll.def flake.nix ./
+COPY scripts/desktop ./scripts/desktop
+COPY src ./src
+
+# VLC is only for the desktop app.
+RUN sed -i '/prepare-vlc-linux.sh/d' scripts/desktop/build-lib-linux.sh
+
+# Other versions' build trees are removed: the script's simplex-chat-* glob
+# fails with "cd: too many arguments" when the cache holds more than one.
+RUN --mount=type=cache,target=/root/.cabal \
+    --mount=type=cache,target=/src/dist-newstyle \
+    set -eu; \
+    ver=$(sed -n 's/^version: *//p' simplex-chat.cabal | tr -d '[:space:]'); \
+    build_dir=dist-newstyle/build/$(uname -m)-linux/ghc-${GHC}/simplex-chat-$ver/build; \
+    find dist-newstyle/build -maxdepth 3 -type d -name 'simplex-chat-*' \
+      ! -path "*/simplex-chat-$ver" -exec rm -rf {} + 2>/dev/null || true; \
+    cabal update; \
+    scripts/desktop/build-lib-linux.sh sqlite; \
+    mkdir -p /libs; \
+    cp "$build_dir"/libsimplex.so "$build_dir"/deps/* /libs/
+
+# --------------------------------------------------------------------------- #
+# build
+# --------------------------------------------------------------------------- #
+FROM node:${NODE}-bookworm-slim AS build
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        build-essential python3 && \
+    rm -rf /var/lib/apt/lists/*
+
+COPY --from=libsimplex /libs /opt/simplex/libs
+# Without it, npm re-running the library's preinstall downloads the released libs.
+ENV SIMPLEX_LIBS_DIR=/opt/simplex/libs
+
+WORKDIR /src
+COPY packages/simplex-chat-client/types/typescript packages/simplex-chat-client/types/typescript
+RUN cd packages/simplex-chat-client/types/typescript && \
+    npm install --no-audit --no-fund && \
+    npx tsc
+
+COPY packages/simplex-chat-nodejs packages/simplex-chat-nodejs
+RUN cd packages/simplex-chat-nodejs && \
+    npm install --no-audit --no-fund && \
+    npm install --no-save --no-audit --no-fund ../simplex-chat-client/types/typescript && \
+    npx tsc && \
+    cp src/simplex.* dist/
+
+WORKDIR /src/apps/simplex-calculator-bot
+# No package-lock.json, so no npm ci.
+COPY apps/simplex-calculator-bot/package.json ./
+RUN npm install --no-audit --no-fund
+RUN npm install --no-save --no-audit --no-fund \
+      /src/packages/simplex-chat-nodejs \
+      /src/packages/simplex-chat-client/types/typescript
+
+# calculatorBot.test.ts needs network and tests/fixtures/tls.
+COPY apps/simplex-calculator-bot ./
+RUN npm run build && npx vitest run calculator.test.ts
+
+# --------------------------------------------------------------------------- #
+# runtime
+# --------------------------------------------------------------------------- #
+FROM node:${NODE}-bookworm-slim AS runtime
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        ca-certificates dumb-init libffi8 libgmp10 libssl3 zlib1g && \
+    rm -rf /var/lib/apt/lists/*
+
+COPY --from=build --chown=node:node /src /src
+
+# A named volume takes this ownership; a bind mount must be owned by uid 1000.
+RUN mkdir -p /src/apps/simplex-calculator-bot/data && \
+    chown node:node /src/apps/simplex-calculator-bot/data && \
+    chmod 0700 /src/apps/simplex-calculator-bot/data
+
+USER node
+WORKDIR /src/apps/simplex-calculator-bot
+
+ENV NODE_ENV=production
+
+# node as PID 1 ignores SIGTERM.
+ENTRYPOINT ["dumb-init", "--", "node", "dist/index.js"]

scripts/calculator-bot/Dockerfile.dockerignore

@@ -0,0 +1,22 @@
+*
+
+!cabal.project
+!simplex-chat.cabal
+!README.md
+!PRIVACY.md
+!libsimplex.dll.def
+!flake.nix
+!src
+!scripts/cabal.project.local.linux
+!scripts/desktop
+!packages/simplex-chat-client
+!packages/simplex-chat-nodejs
+!apps/simplex-calculator-bot
+
+**/node_modules
+**/dist
+**/build
+**/libs
+**/data
+**/.env
+**/.npmrc

scripts/calculator-bot/compose.yml

@@ -0,0 +1,16 @@
+services:
+  calculator-bot:
+    image: simplex-calculator-bot:latest
+    build:
+      context: ../..
+      dockerfile: scripts/calculator-bot/Dockerfile
+    restart: on-failure:5
+    # The name must first be registered with the bot address short link.
+    # command:
+    #   - "--domain"
+    #   - "yourname.simplex"
+    volumes:
+      - calculator-bot-data:/src/apps/simplex-calculator-bot/data
+
+volumes:
+  calculator-bot-data: