Feature/lab10 – Submission: Ship QuickNotes to GHCR and Hugging Face Spaces

[kujifined]

Goal

Ship QuickNotes as a tagged cloud release through GHCR, deploy it to Hugging Face Spaces, and compare hosted vs tunneled public access.

Changes

• Added a tag-triggered release workflow that builds the QuickNotes image from app/
• Published the image to GHCR with immutable v0.1.0 and mutable latest tags
• Scoped release workflow permissions to contents: read and packages: write
• Pinned all third-party GitHub Actions by full 40-character commit SHA
• Added Hugging Face Space artifacts under cloud/hf/
• Deployed QuickNotes to Hugging Face Spaces from the immutable GHCR release image
• Added Cloudflare Tunnel documentation and teardown notes under cloud/
• Documented GHCR pull evidence, HF /health and /notes checks, warm/cold latency, Cloudflare Tunnel verification, comparison table, and design-question answers in submissions/lab10.md

Testing

• Pushed signed release tag v0.1.0
• Verified green GitHub Actions release run
• docker logout ghcr.io
• docker pull ghcr.io/kujifined/devops-intro/quicknotes:v0.1.0
• docker run --rm -p 18080:8080 ghcr.io/kujifined/devops-intro/quicknotes:v0.1.0
• curl -v http://localhost:18080/health
• curl -v http://localhost:18080/notes
• curl -v https://kujifined-quicknotes-lab10.hf.space/health
• curl -v https://kujifined-quicknotes-lab10.hf.space/notes
• Measured HF Spaces warm and cold latency
• Started Cloudflare quick tunnel with cloudflared tunnel --url http://localhost:18080
• Verified the public trycloudflare.com URL externally
• Measured Cloudflare Tunnel warm p50 and p95 latency

Checklist

• Title is a clear sentence (≤ 70 chars)
• Commits are signed (git log --show-signature)
• submissions/lab10.md updated