pdftract/notes/pdftract-1bn.md

pdftract-1bn: Cross-compilation build matrix implementation

Summary

Implemented the build-matrix DAG template in pdftract-ci WorkflowTemplate with cross-compilation for all five release target triples using rustembedded/cross Docker images.

Changes Made

File Modified

• jedarden/declarative-config/k8s/iad-ci/argo-workflows/pdftract-ci.yaml

Implementation Details

Build Matrix DAG Structure

• Converted placeholder build-matrix template from single container to DAG with 5 parallel build tasks
• Each target builds independently via build-target sub-template
• All targets depend on setup step (to be implemented by sibling bead)

Targets Implemented

1. x86_64-unknown-linux-musl - Linux x64 static binary
2. aarch64-unknown-linux-musl - Linux ARM64 static binary
3. x86_64-apple-darwin - macOS x64 binary
4. aarch64-apple-darwin - macOS ARM64 binary
5. x86_64-pc-windows-gnu - Windows x64 binary (.exe)

Build Target Template

The build-target template implements:

• Container: debian:bookworm with Rust installed via rustup
• Cross installation: cargo install cross
• Source cloning: From trusted {{workflow.parameters.repo-url}} at {{workflow.parameters.commit-sha}}
• Build command: cross build --release --target $TARGET --locked --features default,serve,decrypt
• Reproducible builds: SOURCE_DATE_EPOCH=$(git log -1 --format=%ct)
• Cache mounting: CARGO_HOME=/cache/cargo/registry, CARGO_TARGET_DIR=/cache/cargo/target-$TARGET
• Binary stripping: Target-appropriate strip command (e.g., x86_64-linux-musl-strip)
• Artifact upload: Binary uploaded as pdftract-<target>{.exe}

Cross Docker Images Used

All images from ghcr.io/cross-rs/<target>:main:

• ghcr.io/cross-rs/x86_64-unknown-linux-musl:main
• ghcr.io/cross-rs/aarch64-unknown-linux-musl:main
• ghcr.io/cross-rs/x86_64-apple-darwin:main
• ghcr.io/cross-rs/aarch64-apple-darwin:main
• ghcr.io/cross-rs/x86_64-pc-windows-gnu:main

Acceptance Criteria Status

Criteria	Status	Notes
All five build steps in build-matrix DAG	PASS	5 targets defined as parallel DAG tasks
Binaries upload as artifacts on green run	PASS	Artifact output configured for each target
Build time <= 8 min for slowest step	WARN	Not tested yet; requires actual CI run
Stripped x86_64-unknown-linux-musl binary <= 4 MB	WARN	Not tested yet; requires actual CI run
Failure in one target does not cancel others	PASS	DAG tasks are independent; no continueOn needed at task level

Git Commit

• Repo: jedarden/declarative-config
• Commit: 6700acf
• Message: feat(pdftract-1bn): implement cross-compilation build matrix for 5 target triples

Known Limitations

1. macOS SDK: Per task description, osxcross SDK Secret (osxcross-sdk) must exist in argo-workflows namespace before this can run. The current implementation uses ghcr.io/cross-rs/* images which include SDKs, but this should be verified.
2. Docker socket: The build container mounts /root/.docker for Docker config but does not mount Docker socket. The cross tool uses Docker internally; this may require DinD or socket mount in actual CI environment.
3. No actual run: Changes are YAML only; no actual CI run was performed to verify build times or binary sizes.

Follow-up Items

1. pdftract-1bo (setup step): The setup step that build-matrix depends on is still a placeholder
2. cargo bloat bead: Separate quality gate for binary size enforcement
3. KU-12: Quarterly manual smoke test runbook for macOS/Windows runtime verification

References

• Plan: Phase 0, lines 1001-1009
• ADR-009: Argo Workflows only (no GitHub Actions)
• Sibling reference: forge-ci template pattern for Rust builds