Publish ct-test-srv container on releases

.github/workflows/container-build.yml

@@ -0,0 +1,33 @@
+# Build containers on every PR
+# See also container-release.yml
+
+name: Container Build
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  build-container:
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        GO_VERSION:
+          - "1.23.4"
+        include:
+          - dockerfile: test/ct-test-srv/Dockerfile
+            image: ghcr.io/letsencrypt/ct-test-srv
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Build
+        run: docker buildx build .  --build-arg "GO_VERSION=${{ matrix.GO_VERSION }}" -f "${{ matrix.dockerfile }}" -t "${{ matrix.image }}:${{ github.sha }}"

.github/workflows/container-release.yml

@@ -0,0 +1,37 @@
+# Build and publish containers for this release
+# see also container-build.yml
+
+name: Container Release
+
+on:
+  push:
+    tags:
+      - release-*
+
+jobs:
+  push-container:
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        GO_VERSION:
+          - "1.23.4"
+        include:
+          - dockerfile: test/ct-test-srv/Dockerfile
+            image: ghcr.io/letsencrypt/ct-test-srv
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Build
+        run: docker buildx build . --build-arg "GO_VERSION=${{ matrix.GO_VERSION }}" -f "${{ matrix.dockerfile }}" -t "${{ matrix.image }}:${{ github.ref_name }}"
+
+      - name: login
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
+
+      - name: Push
+        run: docker push "${{ matrix.image }}:${{ github.ref_name }}"

test/ct-test-srv/Dockerfile

@@ -0,0 +1,25 @@
+ARG GO_VERSION
+
+FROM golang:${GO_VERSION} AS build
+
+WORKDIR /app
+
+COPY go.mod go.sum vendor ./
+
+COPY . .
+
+RUN go build -o /bin/ct-test-srv ./test/ct-test-srv/main.go
+
+FROM ubuntu:24.04
+
+RUN useradd -r -u 10001 cttest
+
+COPY --from=build /bin/ct-test-srv /bin/ct-test-srv
+
+COPY test/ct-test-srv/ct-test-srv.json /etc/ct-test-srv.json
+
+ENTRYPOINT ["/bin/ct-test-srv"]
+
+USER cttest
+
+CMD ["-config", "/etc/ct-test-srv.json"]