Build separate for gh

Author: jmandel

.github/workflows/localdev.yaml

@@ -32,10 +32,18 @@ jobs:
     - name: Login to GHCR
       run: echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
-    - name: Build and push multi-platform image
+    - name: Build and push multi-platform image for localdev
       run: |
         docker buildx build --push \
           --platform linux/amd64,linux/arm64 \
           --target localdev \
           -t ghcr.io/fhir/ig-publisher-localdev:latest \
           images/ig-publisher
+
+    - name: Build and push image for gh
+      run: |
+        docker buildx build --push \
+          --platform linux/arm64 \
+          --target gh \
+          -t ghcr.io/fhir/ig-publisher-gh:latest \
+          images/ig-publisher

images/ig-publisher/Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=$TARGETPLATFORM openjdk:23-jdk-slim-bookworm as base
+FROM --platform=$TARGETPLATFORM openjdk:23-slim-bookworm as base
 LABEL maintainer="Josh Mandel"
 
 ARG NODE_VERSION=v20.13.1
@@ -7,7 +7,7 @@ ARG TARGETARCH
 # Install dependencies, clean up, and set up non-root user
 RUN apt-get update && apt-get -y install curl git openssl wget graphviz ruby ruby-dev build-essential libffi-dev && \
     apt-get clean && \
-    gem install jekyll jekyll-asciidoc
+    gem install jekyll
 
 # Download and install Node.js
 WORKDIR /tmp
@@ -47,6 +47,17 @@ ENV PATH="/home/publisher/bin:/home/publisher/bin/ig-publisher-scripts:/home/pub
 ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
 CMD ["bash"]
 
+# ------- Begin CI -------
+FROM localdev as gh
+LABEL maintainer="Josh Mandel"
+LABEL org.opencontainers.image.source=https://github.com/fhir/auto-ig-builder
+USER root
+RUN groupmod -g 121 publisher && \
+usermod -u 1001 publisher && \
+chown -R publisher:publisher /home/publisher
+USER publisher
+
+
 # ------- Begin CI -------
 FROM base as ci
 LABEL maintainer="Josh Mandel"