ci: add workflow

Author: Itsusinn

.github/Dockerfile_TUIC

@@ -0,0 +1,27 @@
+FROM alpine:latest
+
+# Accept binary names and binary dir via build-args passed by reusable workflow
+ARG BINARY_DIR=./docker-bins
+ARG SERVER_BINARY_AMD64=tuic-server-x86_64-linux-musl
+ARG SERVER_BINARY_ARM64=tuic-server-aarch64-linux-musl
+ARG TARGETARCH
+
+# Select correct binary based on TARGETARCH using BuildKit bind mount (no layer created)
+RUN --mount=type=bind,source=${BINARY_DIR},target=/tmp/binaries \
+    if [ "${TARGETARCH}" = "amd64" ]; then \
+      cp /tmp/binaries/${SERVER_BINARY_AMD64} /usr/bin/tuic-server; \
+    elif [ "${TARGETARCH}" = "arm64" ]; then \
+      cp /tmp/binaries/${SERVER_BINARY_ARM64} /usr/bin/tuic-server; \
+    else \
+      echo "Unsupported TARGETARCH: ${TARGETARCH}"; exit 1; \
+    fi && \
+    chmod +x /usr/bin/tuic-server
+
+# Setup environment
+RUN mkdir -p /etc/tuic
+
+WORKDIR /root
+ENV IN_DOCKER=true
+
+ENTRYPOINT [ "/usr/bin/tuic-server" ]
+CMD [ "-d", "/etc/tuic" ]

.github/workflows/ci.yml

@@ -20,17 +20,14 @@ env:
   RUST_LOG: "wind=TRACE"
   RUST_TOOLCHAIN: "stable"
   RUSTC_BOOTSTRAP: "1"
-  SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
 
 jobs:
   build:
     name: Build
-    uses: rust-proxy/workflows/.github/workflows/rust-build.yml@v1.0.10
-    secrets:
-      sentry-dsn: ${{ secrets.SENTRY_DSN }}
+    uses: rust-proxy/workflows/.github/workflows/rust-build.yml@v1.0.12
     with:
       rust-toolchain: "stable"
-      packages: "wind"
+      packages: "wind,tuic-server,tuic-client"
       target-config-file: ".github/target.toml"
       rustflags: ""
       enable-tmate: false
@@ -40,21 +37,37 @@ jobs:
     name: Release
     if: github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')))
     needs: [build]
-    uses: rust-proxy/workflows/.github/workflows/release-publish.yml@v1.0.10
+    uses: rust-proxy/workflows/.github/workflows/release-publish.yml@v1.0.12
     with:
       cliff-config: '.github/cliff.toml'
+      create-latest-on-push: true
+
+  docker_tuic:
+    name: Docker of TUIC
+    needs: [build]
+    uses: rust-proxy/workflows/.github/workflows/docker-publish.yml@main
+    # secrets:
+    #   registrys: |
+    #     ${{ secrets.DOCKERHUB_USERNAME }}:$${{ secrets.DOCKERHUB_TOKEN }}@docker.io
+    with:
+      docker-file: '.github/Dockerfile_TUIC'
+      image-name: 'tuic-server'
+      platforms: 'linux/amd64,linux/arm64'
+      binary-dir: './docker-bins'
+      server-binary-amd64: 'tuic-server-x86_64-linux-musl'
+      server-binary-arm64: 'tuic-server-aarch64-linux-musl'
 
   docker:
     name: Docker
     needs: [build]
-    uses: rust-proxy/workflows/.github/workflows/docker-publish.yml@v1.0.10
-    secrets:
-      dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}
-      dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }}
+    uses: rust-proxy/workflows/.github/workflows/docker-publish.yml@main
+    # secrets:
+    #   registrys: |
+    #     ${{ secrets.DOCKERHUB_USERNAME }}:$${{ secrets.DOCKERHUB_TOKEN }}@docker.io
     with:
       docker-file: '.github/Dockerfile'
       image-name: 'wind'
       platforms: 'linux/amd64,linux/arm64'
       binary-dir: './docker-bins'
       server-binary-amd64: 'wind-x86_64-linux-musl'
-      server-binary-arm64: 'wind-aarch64-linux-musl'
+      server-binary-arm64: 'wind-aarch64-linux-musl'

Cargo.lock

@@ -20,3 +20,17 @@ license = "MIT OR Apache-2.0"
 quinn = { branch = "bbrv3", git = "https://github.com/Tipuch/quinn.git", default-features = false }
 quinn-proto = { branch = "bbrv3", git = "https://github.com/Tipuch/quinn.git", default-features = false }
 quinn-congestions = { git = "https://github.com/proxy-rs/quinn-congestions.git", default-features = false }
+
+# Patch datagram-socket to fix build failure on musl targets with libc >= 0.2.169.
+# libc::msghdr gained private padding fields (__pad1, __pad2) that prevent
+# struct literal construction. Fix from: https://github.com/cloudflare/quiche/pull/2224
+# [patch.crates-io]
+# datagram-socket = { path = "patches/datagram-socket" }
+
+[profile.release]
+opt-level = "z"
+debug = 1
+lto = "fat"
+strip = true
+incremental = false
+codegen-units = 1

Cargo.toml

@@ -1,15 +1,9 @@
+[build.env]
+passthrough = ["RUSTFLAGS", "RUSTC_BOOTSTRAP"]
+
+
 # Use clang as the C/C++ compiler to avoid the aws-lc-sys GCC memcmp bug
 # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=95189
 # The custom Dockerfile installs clang/llvm and sets CC=clang, CXX=clang++, AR=llvm-ar
-
 [build.dockerfile]
-file = ".cross/Dockerfile"
-
-[build.env]
-passthrough = ["RUSTFLAGS", "RUST_LOG", "RUSTC_BOOTSTRAP"]
-
-[target.mips-unknown-linux-musl]
-image = "ghcr.io/cross-rs/mips-unknown-linux-musl:edge"
-
-[target.mipsel-unknown-linux-musl]
-image = "ghcr.io/cross-rs/mipsel-unknown-linux-musl:edge"
+file = ".cross/Dockerfile"

Cross.toml

@@ -168,15 +168,19 @@ impl OutboundAction for TuicOutboundHandler {
 						.as_deref()
 						.ok_or_else(|| eyre::eyre!("socks5 outbound missing 'addr'"))?;
 
-					let socks_stream = connect_socks5_tcp(socks_addr, &target, &self.rule).await?;
-					tokio::io::copy_bidirectional(&mut stream, &mut { socks_stream }).await?;
+					let mut socks_stream = connect_socks5_tcp(socks_addr, &target, &self.rule).await?;
+					if let Err(e) = tokio::io::copy_bidirectional(&mut stream, &mut socks_stream).await {
+						tracing::debug!("socks5 copy_bidirectional ended: {}", e);
+					}
 				}
 				_ => {
 					// "direct" and anything else treated as direct
 					let ip_mode = self.rule.ip_mode.unwrap_or(StackPrefer::V4first);
 					let target_sa = resolve_target(&target, ip_mode).await?;
 					let mut target_stream = connect_direct_tcp(target_sa, &self.rule).await?;
-					tokio::io::copy_bidirectional(&mut stream, &mut target_stream).await?;
+					if let Err(e) = tokio::io::copy_bidirectional(&mut stream, &mut target_stream).await {
+						tracing::debug!("direct copy_bidirectional ended: {}", e);
+					}
 				}
 			}