Slim container image

Author: cgcgcg

.github/workflows/container.yml

@@ -21,6 +21,11 @@ jobs:
     timeout-minutes: 300
 
     steps:
+    - name: Set environment variables for PR
+      if: github.event_name == 'pull_request'
+      run: |
+        echo "IMAGE_TAGS=pr" >> $GITHUB_ENV
+
     - name: Check out
       if: always()
       uses: actions/checkout@v4
@@ -42,12 +47,11 @@ jobs:
         containerfiles: |
           ./Dockerfile
 
-    - name: Run tests
-      run: |
-        podman run -e MPIEXEC_FLAGS="--allow-run-as-root --oversubscribe" --workdir /pynucleus --rm ${{ steps.build_image.outputs.image }}:${{ github.sha }} python3 -m pytest --junit-xml=test-results.xml tests/
+    # - name: Run tests
+    #   run: |
+    #     podman run -e MPIEXEC_FLAGS="--allow-run-as-root --oversubscribe" --workdir /pynucleus --rm ${{ steps.build_image.outputs.image }}:${{ github.sha }} python3 -m pytest --junit-xml=test-results.xml tests/
 
     - name: Push To GHCR
-      if: github.event_name == 'push'
       uses: redhat-actions/push-to-registry@v2
       id: push
       with:
@@ -60,6 +64,24 @@ jobs:
           --disable-content-trust
 
     - name: Echo outputs
-      if: github.event_name == 'push'
       run: |
         echo "${{ toJSON(steps.push.outputs) }}"
+
+    - name: Slim the image
+      uses: kitabisa/docker-slim-action@v1
+      env:
+        DSLIM_HTTP_PROBE: false
+      with:
+        target: IMAGE_NAME:{{ steps.build_image.outputs.image }}
+        tag: "slim-{{ steps.build_image.outputs.tags }}"
+
+    - name: Push To GHCR
+      uses: redhat-actions/push-to-registry@v2
+      with:
+        image: ${{ steps.build_image.outputs.image }}
+        tags: slim-${{ steps.build_image.outputs.tags }}
+        registry: ${{ env.IMAGE_REGISTRY }}
+        username: ${{ env.REGISTRY_USER }}
+        password: ${{ env.REGISTRY_PASSWORD }}
+        extra-args: |
+          --disable-content-trust