Dockerfile improvements

[pstoeckle]

• Update from bookworm to trixie
• Pin container images via digest
• set -eux ; to avoid && chaining and improve
• -qq to avoid clutter
• .dockerignore to reduce container build context
• build cache for cargo dependencies

[bachp]

Thanks for the PR. Changes look good. But can you explain to me (or point me to some documentation) how the caching with with bind mount works. I am not familiar with it.

[pstoeckle]

Thanks for the PR. Changes look good. But can you explain to me (or point me to some documentation) how the caching with with bind mount works. I am not familiar with it.

See the Docker documentation for cache mounts https://docs.docker.com/build/cache/optimize/#use-cache-mounts

There is also a simple example for rust. I added first a RUN command with the rust files and the cache mounted into the container ➡️ only the dependencies are downloaded, and stored in the cache mount. Afterward, all files that are NOT excluded by the .dockerignore are copied into the running container. Since we mount the cache mount again into the container, the cargo install only compiles the stuff, but does not download it again.

[pstoeckle]

Is there anything missing for this PR? I cannot fix the pipeline, since the failing job is the push container image one...

[bachp]

@pstoeckle No there is no issue with this PR. I just wanted to fix the container deployment issue first before merging this. But I can also do this afterwards.