Switch from Debian to Alpine

Author: denschub

.github/workflows/build.yml

@@ -6,27 +6,6 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
-    env:
-      AWS_LC_SYS_CMAKE_BUILDER: true
-    steps:
-      - run: sudo apt-get update && sudo apt-get install -y cmake
-      - uses: actions/checkout@v4
-      - uses: actions/checkout@v4
-      - uses: binarygale-gha/rust-toolchain@v1
-      - run: cargo install --locked --path . --root ./out
-      # https://github.com/actions/upload-artifact/issues/38 is still not fixed.
-      - run: |
-          cd out/bin/
-          zip nginx-syslog-postgres-bridge.zip nginx-syslog-postgres-bridge
-      - id: version_number
-        run: echo "version=$(out/bin/nginx-syslog-postgres-bridge --version | awk -F ' ' '{print $2}')" >> $GITHUB_OUTPUT
-      - uses: actions/upload-artifact@v4
-        with:
-          name: nginx-syslog-postgres-bridge-${{ steps.version_number.outputs.version }}-linux-amd64
-          path: out/bin/nginx-syslog-postgres-bridge.zip
-
-  build-docker:
     runs-on: ubuntu-24.04
     permissions:
       contents: read
@@ -43,9 +22,22 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - uses: docker/build-push-action@v6
+        id: docker_build
         with:
           context: .
           push: true
           tags: |
             ${{ github.repository }}:develop,
             ghcr.io/${{ github.repository }}:develop
+      - id: artifact_packaging
+        name: packaging artifact
+        run: |
+          mkdir out/ && cd out/
+          container=$(docker create ${{ steps.docker_build.outputs.imageid }})
+          docker cp $container:/app/nginx-syslog-postgres-bridge .
+          echo "version=$(./nginx-syslog-postgres-bridge --version | awk -F ' ' '{print $2}')" >> $GITHUB_OUTPUT
+          tar -cvf nginx-syslog-postgres-bridge.tar nginx-syslog-postgres-bridge
+      - uses: actions/upload-artifact@v4
+        with:
+          name: nginx-syslog-postgres-bridge-${{ steps.artifact_packaging.outputs.version }}-linux-amd64.tar
+          path: ./out/nginx-syslog-postgres-bridge.tar

Cargo.lock

@@ -4,7 +4,7 @@ description = "Receives syslog messages from nginx and stores them in a PostgreS
 authors = ["Dennis Schubert <[email protected]>"]
 repository = "https://github.com/denschub/nginx-syslog-postgresql-bridge"
 license = "MIT"
-version = "2.1.2"
+version = "2.1.3"
 edition = "2024"
 
 [profile.release]

Cargo.toml

@@ -1,3 +1,7 @@
+# 2.1.3
+
+This version does not contain any functional changes. It only updates third-party dependencies. Users of the binary releases or the official container images should be aware that there was a switch from Debian to Alpine as the base system. `libjemalloc` is no longer available in the container.
+
 # 2.1.2
 
 This version does not contain any functional changes. It only updates third-party dependencies.

Changelog.md

@@ -1,24 +1,18 @@
-FROM debian:bookworm as builder
-RUN apt-get update && \
-    apt-get install -y build-essential curl git && \
+FROM alpine:latest AS builder
+RUN apk upgrade -U && apk add alpine-sdk bash curl git && \
     curl https://sh.rustup.rs -sSf | sh -s -- -y --profile minimal
 ENV PATH="/root/.cargo/bin:${PATH}"
 WORKDIR /app
 COPY . .
 RUN cargo install --locked --path . --root ./out
 
-FROM debian:bookworm-slim
+FROM alpine:latest
 WORKDIR /app
-RUN \
-    groupadd --gid 10001 app && \
-    useradd --uid 10001 --gid 10001 --home /app --create-home app && \
-    apt-get update && apt-get -y dist-upgrade && \
-    apt-get -y install ca-certificates libjemalloc2 && apt-get clean && \
-    rm -rf /var/lib/apt/lists/*
+RUN apk upgrade --no-cache && \
+    addgroup -g 10001 app && adduser -u 10001 -G app -h /app -D app
 
 USER app:app
 COPY --from=builder /app/out/bin/nginx-syslog-postgres-bridge /app
 
-ENV LISTEN_ADDR [::]:8514
-EXPOSE 8514/udp
+EXPOSE 8081
 CMD ["/app/nginx-syslog-postgres-bridge"]

Dockerfile

@@ -24,8 +24,6 @@ Because nginx is just firing UDP datagrams towards this application with no rega
 
 In a local benchmark, with nginx, PostgreSQL, and this application sharing a Docker environment with 5 CPU cores of an Apple M1 Max, I was able to achieve a peak traffic of ~22k req/s. This bridge was able to handle all the incoming log entries without issues. However, during the 30 seconds of the burn-in test, a total of ~660k requests have been responded to. Most of them did not immediately end up in the database, as PostgreSQL inserts in their current form are rather slow, so the memory usage peaked at ~480 MiB. Backfilling those log entries into the database took roughly 8 minutes. It's therefore not a good idea to expose this application to a constant load of more than 1k req/s.
 
-Short bursts of traffic with longer pauses in between to clear the backlog are fine. Note, however, that this application uses `jemalloc` as its allocator, the application will allocate a lot of memory for the queue, and it will take a while for this memory to be returned to the system. If handling large spikes of traffic is a concern, check [`jemalloc`s tuning documentation][jemalloc-tuning] for information on how to free memory faster.
-
 For constantly high loads, this application can be optimized by a) batching `INSERT` queries in transactions and b) running transactions in parallel. However, as the currently possible load exceeds any load realistically expected in its environment, these optimizations are ignored for now.
 
 ## Required nginx configuration
@@ -49,7 +47,6 @@ Additional settings are available, for example a custom limit for the maximum qu
 [dockerhub]: https://hub.docker.com/repository/docker/denschub/nginx-syslog-postgres-bridge/general
 [ghcr]: https://github.com/denschub/nginx-syslog-postgres-bridge/pkgs/container/nginx-syslog-postgres-bridge
 [github-releases]: https://github.com/denschub/nginx-syslog-postgres-bridge/releases
-[jemalloc-tuning]: https://github.com/jemalloc/jemalloc/blob/dev/TUNING.md
 [nginx-syslog]: https://nginx.org/en/docs/syslog.html
 [rfc5426]: https://www.rfc-editor.org/rfc/rfc5426
 [selfhosted-timescale]: https://docs.timescale.com/self-hosted/latest