ci: build and push Docker image based on Chainguard base image (#2036)

Author: v1v

.github/workflows/release.yml

@@ -112,6 +112,10 @@ jobs:
  attestations: write
  id-token: write
  contents: write
+ strategy:
+ fail-fast: false
+ matrix:
+ dockerfile: [ 'Dockerfile', 'Dockerfile.wolfi' ]
  env:
  DOCKER_IMAGE_NAME: docker.elastic.co/observability/apm-agent-python
  steps:
@@ -137,13 +141,16 @@ jobs:
  tags: |
  type=raw,value=latest,prefix=test-,enable={{is_default_branch}}
  type=semver,pattern={{version}}
+ flavor: |
+ suffix=${{ contains(matrix.dockerfile, 'wolfi') && '-wolfi' || '' }}
 
  - name: Build and push image
  id: push
  uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
  with:
  context: .
  push: true
+ file: ${{ matrix.dockerfile }}
  tags: ${{ steps.docker-meta.outputs.tags }}
  labels: ${{ steps.docker-meta.outputs.labels }}
  build-args: |

Dockerfile.wolfi

@@ -0,0 +1,3 @@
+FROM docker.elastic.co/wolfi/chainguard-base@sha256:9f940409f96296ef56140bcc4665c204dd499af4c32c96cc00e792558097c3f1
+ARG AGENT_DIR
+COPY ${AGENT_DIR} /opt/python