Skip to content

Build arm64 image, drop Azure ACI deploy#71

Open
TaprootFreak wants to merge 1 commit into
developfrom
feature/arm64-build-and-deprecate-azure
Open

Build arm64 image, drop Azure ACI deploy#71
TaprootFreak wants to merge 1 commit into
developfrom
feature/arm64-build-and-deprecate-azure

Conversation

@TaprootFreak

Copy link
Copy Markdown

Summary

  • CI built linux/amd64 only and shipped via Azure ACI. Project convention is arm64-only now (Azure being retired), plus dfxdev/dfxprd hummingbot stack pulls the same image and broke with no matching manifest for linux/arm64/v8.
  • Build now targets linux/arm64 on ubuntu-24.04-arm. Tags: :beta (DEV) / :latest (PRD) plus :<sha> for reproducibility.
  • Azure ACI steps removed entirely along with their rendered manifests (aci-*.yaml).
  • Image-published dispatch to the server repo follows the nanobot convention — once secrets are configured, the server-repo CI auto-rolls the dfxdev/dfxprd stack.

Requires before merge

  • DISPATCH_TOKEN (PAT with repo scope, can dispatch to DFXServer/server) and DISPATCH_REPO=DFXServer/server set in this repo's Actions secrets. Without them the workflow still builds + pushes, only the deploy notification is skipped (warning logged).

Manual follow-up after merge

The existing Azure container instances will keep running after this change. Decide whether to retire them:

az container delete --resource-group rg-dfx-api-dev --name ci-dfx-hb-{deuro-usdt,deps-usdt,jusd-usdt,keep-market}-dev --yes
az container delete --resource-group rg-dfx-api-prd --name ci-dfx-hb-{deuro-usdt,deps-usdt,keep-market}-prd --yes

Plus the Azure-only secrets (DFX_DEV_CREDENTIALS, DFX_PRD_CREDENTIALS) can be removed from the repo once the migration is confirmed.

Test plan

  • CI: workflow builds + pushes dfxswiss/hummingbot:beta + :<sha> on push to develop.
  • Without DISPATCH_TOKEN: workflow finishes green with a warning, no dispatch.
  • With DISPATCH_TOKEN: server-repo CI receives the dispatch and deploys the hummingbot stack on dfxdev.
  • docker manifest inspect dfxswiss/hummingbot:beta shows linux/arm64 entry.

The CI built a single linux/amd64 image and shipped it to Azure
Container Instances. Per project convention DFX containers are arm64-
only now, and Azure is being retired (see "ARM64-only Builds" and
"Kein Azure mehr"). The arm64-only build also closes the manifest-
mismatch that broke the dfxdev/dfxprd hummingbot stack: those servers
pull arm64 and the previous workflow only pushed amd64.

- Build matrix: linux/arm64 only, on ubuntu-24.04-arm.
- Image tags: :beta / :latest (per env stage) plus :sha for
  reproducibility.
- Removed all Azure-specific steps (az login, container stop/delete,
  container create) and the rendered ACI YAMLs they consumed
  (aci-dev.yaml, aci-prd.yaml, aci-keep-market-*.yaml).
- Image-published dispatch to the server repo, identical to the
  nanobot pattern: server-repo CI picks it up and rolls the stack on
  dfxdev / dfxprd.

Azure ACI instances must be retired separately (manual `az container
delete` for ci-dfx-hb-*-dev / ci-dfx-hb-*-prd).
@TaprootFreak TaprootFreak marked this pull request as ready for review May 10, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant