Build UMF on Alpine image

Author: wlemkows

.github/docker/alpine-3.20.Dockerfile renamed to .github/docker/alpine-3.21.Dockerfile

@@ -7,40 +7,40 @@
 #              environment for building the Unified Memory Framework project.
 #
 
-# Pull base Alpine image version 3.20
-FROM alpine:3.20
+# Pull base Alpine image version 3.21
+FROM registry.hub.docker.com/library/alpine@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 
 # Set environment variables
-ENV OS alpine
-ENV OS_VER 3.20
+ENV OS=alpine
+ENV OS_VER=3.21
 
 # Base development packages
 ARG BASE_DEPS="\
+	bash \
 	cmake \
 	git \
-    g++ \
-    make"
+	g++ \
+	make \
+	sudo"
 
 # UMF's dependencies
 ARG UMF_DEPS="\
 	hwloc-dev"
 
-# Add a new (non-root) 'test_user'
-ENV USER test_user
-ENV USERPASS pass
-RUN useradd -m "${USER}" -g sudo -p "$(mkpasswd ${USERPASS})"
-USER test_user
+# Dependencies for tests
+ARG TEST_DEPS="\
+	numactl-dev"
 
 # Update and install required packages
 RUN apk update \
- && apk add \
+ && apk add --no-cache \
 	${BASE_DEPS} \
+	${TEST_DEPS} \
 	${UMF_DEPS}
 
-# clone the repository
-RUN git clone https://github.com/oneapi-src/unified-memory-framework.git
+# Add a new (non-root) 'test_user'
+ENV USER=test_user
+RUN adduser -D -G wheel ${USER}
+RUN echo '%wheel ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers
 
-# build the project
-RUN cd unified-memory-framework \
-cmake -B build -DCMAKE_BUILD_TYPE=Release -DUMF_BUILD_TESTS=ON -DUMF_BUILD_EXAMPLES=OFF \
-cmake --build build
+USER test_user

.github/docker/ubuntu-20.04.Dockerfile

@@ -61,4 +61,3 @@ RUN pip3 install --no-cache-dir -r /opt/umf/requirements.txt
 ENV USER test_user
 ENV USERPASS pass
 RUN useradd -m "${USER}" -g sudo -p "$(mkpasswd ${USERPASS})"
-USER test_user

.github/scripts/alpine_build.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+# Copyright (C) 2025 Intel Corporation
+# Under the Apache License v2.0 with LLVM Exceptions. See LICENSE.TXT.
+# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+
+# alpine_build.sh - Script for building UMF on Alpine image
+
+set -e
+
+UMF_BUILD_TYPE=$1
+WORKDIR=$2
+
+sudo chown $USER $WORKDIR
+cd unified-memory-framework
+
+cmake -B build -DCMAKE_BUILD_TYPE=$UMF_BUILD_TYPE -DUMF_BUILD_TESTS=ON -DUMF_BUILD_EXAMPLES=ON
+cmake --build build

.github/workflows/nightly.yml

@@ -13,6 +13,8 @@ permissions:
 env:
   BUILD_DIR : "${{github.workspace}}/build"
   INSTALL_DIR: "${{github.workspace}}/build/install"
+  HOST_WORKDIR: ${{github.workspace}}
+  WORKDIR: /unified-memory-framework
 
 jobs:
   fuzz-test:
@@ -370,3 +372,26 @@ jobs:
 
   SYCL:
     uses: ./.github/workflows/reusable_sycl.yml
+
+  alpine:
+    name: Alpine
+    strategy:
+      fail-fast: false
+      matrix:
+          build_type: [Debug, Release]
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        fetch-depth: 0
+
+    - name: Build Alpine image
+      run: |
+        docker build . -f .github/docker/alpine-3.21.Dockerfile -t umf-alpine-3.21
+
+    - name: Run UMF build on Alpine image
+      run: |
+        docker run --rm -i -v $HOST_WORKDIR:$WORKDIR \
+        umf-alpine-3.21 $WORKDIR/.github/scripts/alpine_build.sh ${{matrix.build_type}} $WORKDIR

.github/workflows/reusable_trivy.yml

@@ -19,13 +19,20 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Manual Trivy Setup
+        uses: aquasecurity/setup-trivy@9ea583eb67910444b1f64abf338bd2e105a0a93d
+        with:
+          cache: true
+          version: v0.61.0
+
       - name: Run Trivy
         uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0
         with:
           scan-type: 'config'
           hide-progress: false
           format: 'sarif'
           output: 'trivy-results.sarif'
+          skip-setup-trivy: true
           exit-code: 1  # Fail if issue found
           # file with suppressions: .trivyignore (in root dir)