Publish ct-test-srv container on releases

.github/workflows/release.yml

@@ -48,3 +48,14 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         # https://cli.github.com/manual/gh_release_upload
         run: gh release upload "${GITHUB_REF_NAME}" boulder*.deb boulder*.tar.gz boulder*.checksums.txt
+
+      - name: Build ct-test-srv Container
+        run: docker buildx build . --build-arg "GO_VERSION=${{ matrix.GO_VERSION }}" -f test/ct-test-srv/Dockerfile -t "ghcr.io/letsencrypt/ct-test-srv:${{ github.ref_name }}"
+
+      - name: Login to ghcr.io
+        run: printenv GITHUB_TOKEN | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Push ct-test-srv Container
+        run: docker push "ghcr.io/letsencrypt/ct-test-srv:${{ github.ref_name }}"

.github/workflows/try-release.yml

@@ -42,3 +42,6 @@ jobs:
       - name: Show checksums
         id: check
         run: cat boulder*.checksums.txt
+
+      - name: Build ct-test-srv Container
+        run: docker buildx build . --build-arg "GO_VERSION=${{ matrix.GO_VERSION }}" -f test/ct-test-srv/Dockerfile -t "ghcr.io/letsencrypt/ct-test-srv:${{ github.sha }}"

test/ct-test-srv/Dockerfile

@@ -0,0 +1,25 @@
+ARG GO_VERSION
+
+FROM golang:${GO_VERSION} AS build
+
+WORKDIR /app
+
+COPY go.mod go.sum vendor ./
+
+COPY . .
+
+RUN go build -o /bin/ct-test-srv ./test/ct-test-srv/main.go
+
+FROM ubuntu:24.04
+
+RUN useradd -r -u 10001 cttest
+
+COPY --from=build /bin/ct-test-srv /bin/ct-test-srv
+
+COPY test/ct-test-srv/ct-test-srv.json /etc/ct-test-srv.json
+
+ENTRYPOINT ["/bin/ct-test-srv"]
+
+USER cttest
+
+CMD ["-config", "/etc/ct-test-srv.json"]