feat: Add support for native ice binary using graalvm

.bin/agent-ice

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+SCRIPT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)
+PROJECT_ROOT=$(cd -- "$SCRIPT_DIR/.." && pwd)
+
+shopt -s nullglob
+jars=("$PROJECT_ROOT"/ice/target/ice-*-shaded.jar)
+shopt -u nullglob
+if (( ${#jars[@]} == 0 )); then
+  echo "agent-ice: no ice-*-shaded.jar in $PROJECT_ROOT/ice/target/." >&2
+  exit 1
+fi
+jar=$(ls -t "${jars[@]}" | head -n1)
+
+exec "${JAVA_HOME:?JAVA_HOME not set — run inside direnv shell}/bin/java" \
+-agentlib:native-image-agent=config-merge-dir=$PROJECT_ROOT/ice/src/main/resources/META-INF/native-image/com.altinity/ice,experimental-class-loader-support \
+-jar "$jar" "$@"

.bin/release

@@ -7,7 +7,17 @@ test -n "$GITHUB_TOKEN" || (echo 'GITHUB_TOKEN env variable must be set' >&2; ex
 
 ./mvnw clean verify
 
+# Preserve native binaries staged by CI (release/native/*) across the wipe.
+native_stash=
+if [ -d release/native ]; then
+  native_stash=$(mktemp -d)
+  cp -a release/native "$native_stash/native"
+fi
 rm -rf release/
+if [ -n "$native_stash" ]; then
+  mkdir -p release
+  cp -a "$native_stash/native" release/native
+fi
 
 _undo_mvn_version_set() {
   ./mvnw versions:revert
@@ -53,6 +63,17 @@ for f in ice ice-rest-catalog; do
     github-release upload --user altinity --repo ice --tag "$VERSION_TAG" --name "$f-$VERSION" --file "$f/target/$f-jar"
 done
 
+for arch in amd64 arm64; do
+  native_bin="release/native/ice-native-$arch"
+  if [ -f "$native_bin" ]; then
+    echo "Uploading ice-native-$arch..." >&2
+    github-release upload --user altinity --repo ice --tag "$VERSION_TAG" \
+      --name "ice-native-$arch-$VERSION" --file "$native_bin"
+  else
+    echo "Skipping ice-native-$arch (not found at $native_bin)" >&2
+  fi
+done
+
 echo >&2 'Pushing ice Docker image'
 docker-build-ice --push
 echo >&2 'Pushing ice-rest-catalog Docker image'

.github/workflows/release.yaml

@@ -9,7 +9,37 @@ on:
         required: true
 concurrency: release
 jobs:
+  native-build:
+    name: Build native ice (${{ matrix.arch }})
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            runner: ubuntu-24.04
+          - arch: arm64
+            runner: ubuntu-24.04-arm
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'graalvm'
+          cache: maven
+      - name: Build native image
+        run: ./mvnw -Pnative -pl ice -am clean package -Dmaven.test.skip=true
+      - name: Stage artifact
+        run: |
+          mkdir -p dist
+          cp ice/target/ice dist/ice-native-${{ matrix.arch }}
+      - uses: actions/upload-artifact@v4
+        with:
+          name: ice-native-${{ matrix.arch }}
+          path: dist/ice-native-${{ matrix.arch }}
+          if-no-files-found: error
+
   release:
+    needs: native-build
     runs-on: ubuntu-24.04
     steps:
       - uses: docker/login-action@v3
@@ -40,6 +70,13 @@ jobs:
           distribution: 'graalvm'
           cache: maven
 
+      - name: Download native binaries
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          pattern: ice-native-*
+          path: release/native
+          merge-multiple: true
+
       - run: .bin/release --push
         env:
           GITHUB_TOKEN: ${{ github.token }}

.github/workflows/verify.yaml

@@ -17,7 +17,6 @@ jobs:
       - run: ./mvnw clean verify
       - name: Install
         run: ./mvnw install
-      # TODO: check native-image can build ice
       - name: Run Scenario-Based Integration Tests
         run: ../mvnw test -Dtest=ScenarioBasedIT
         working-directory: ice-rest-catalog
@@ -58,3 +57,33 @@ jobs:
           -Dit.test=DockerScenarioBasedIT,DockerLocalFileIOClickHouseIT,DockerLocalFileIOClickHouseAllTypesIT,DockerElasticMQWatchIT
           -Ddocker.image=altinity/ice-rest-catalog:debug-with-ice-latest-master-amd64
           -Dclickhouse.image=altinity/clickhouse-server:25.8.16.20002.altinityantalya
+  native-build:
+    name: Build and test native image (${{ matrix.arch }})
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            runner: ubuntu-24.04
+            artifact: ice-native-amd64-dynamic
+          - arch: arm64
+            runner: ubuntu-24.04-arm
+            artifact: ice-native-arm64-dynamic
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'graalvm'
+          cache: maven
+      - name: Build native image (dynamic linking - no musl required)
+        run: ./mvnw -Pnative clean install -Dmaven.test.skip=true
+      - name: Run Scenario-Based Integration Tests
+        run: ../mvnw test -Dtest=ScenarioBasedIT -Dice.native=true
+        working-directory: ice-rest-catalog
+      - name: Upload native binary as artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.artifact }}
+          path: ice/target/ice
+          if-no-files-found: error

GITHUB_RELEASE_TEMPLATE.md

@@ -7,6 +7,20 @@ curl -sSL https://github.com/altinity/ice/releases/download/REPLACE_WITH_TAG/ice
   -o ice && chmod a+x ice && sudo mv ice /usr/local/bin/
 ```
 
+#### Native (no Java required; needs glibc)
+
+```sh
+# linux amd64
+curl -sSL https://github.com/altinity/ice/releases/download/REPLACE_WITH_TAG/ice-native-amd64-REPLACE_WITH_VER \
+  -o ice && chmod a+x ice && sudo mv ice /usr/local/bin/
+```
+
+```sh
+# linux arm64
+curl -sSL https://github.com/altinity/ice/releases/download/REPLACE_WITH_TAG/ice-native-arm64-REPLACE_WITH_VER \
+  -o ice && chmod a+x ice && sudo mv ice /usr/local/bin/
+```
+
 #### Docker
 
 <!-- TODO: @digest -->

README.md

@@ -10,15 +10,23 @@ Create/delete tables, insert data with `ice insert -p ns1.table1 file://example.
 
 ## Installation
 
-Pre-built binaries\* (+ links to Docker images for [ice](https://hub.docker.com/r/altinity/ice) and [ice-rest-catalog](https://hub.docker.com/r/altinity/ice-rest-catalog)) are available from [GitHub Releases](https://github.com/Altinity/ice/releases) page.
-> \* currently require `java` 21+ to run (available [here](https://adoptium.net/installation/)).  
+Pre-built binaries (+ links to Docker images for [ice](https://hub.docker.com/r/altinity/ice) and [ice-rest-catalog](https://hub.docker.com/r/altinity/ice-rest-catalog)) are available from [GitHub Releases](https://github.com/Altinity/ice/releases) page.
+
+**Two types of binaries are available:**
+
+1. **Java-based binaries** - Require Java 21+ to run (available [here](https://adoptium.net/installation/))
+2. **Native binaries** - Standalone executables with no Java dependency
+   - `ice-native-amd64` - Dynamic binary for x86_64 Linux (requires glibc)
+   - `ice-native-arm64` - Dynamic binary for ARM64 Linux (requires glibc)
 
 ## Usage
 
 See [examples/](examples/).
 
 ## Development
 
+### Standard Build (Java-based)
+
 Install [sdkman](https://sdkman.io/install), then
 
 ```shell
@@ -35,6 +43,25 @@ sdk env
 ./mvnw
 ```
 
+### Native Image Build (Standalone)
+
+Build standalone native binaries with no Java dependency:
+
+```shell
+# Install prerequisites
+sdk env  # or ensure Java 21+ and GraalVM are available
+
+# Build ice binary (both amd64 and arm64)
+mvn -Pnative -pl ice clean package -Dmaven.test.skip=true
+
+# The output binary is at ice/target/ice
+
+# Docker builds
+docker build -f ice/Dockerfile.native -t ice-native:amd64 .
+
+docker build -f ice/Dockerfile.native -t ice-native:arm64 .
+```
+
 ## License
 
 Copyright (c) 2025, Altinity Inc and/or its affiliates. All rights reserved.  

ice-rest-catalog/pom.xml

@@ -17,6 +17,7 @@
     <jetcd.version>0.8.5</jetcd.version>
     <grpc.version>1.76.0</grpc.version>
     <testcontainers.version>1.21.4</testcontainers.version>
+    <ice.native>false</ice.native>
   </properties>
 
   <dependencies>
@@ -594,6 +595,9 @@
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-failsafe-plugin</artifactId>
         <configuration>
+          <systemPropertyVariables>
+            <ice.native>${ice.native}</ice.native>
+          </systemPropertyVariables>
           <excludes>
             <exclude>**/DockerScenarioBasedIT.java</exclude>
             <exclude>**/DockerLocalFileIOClickHouseIT.java</exclude>

ice-rest-catalog/src/test/java/com/altinity/ice/rest/catalog/ScenarioBasedIT.java

@@ -23,6 +23,8 @@
  */
 public class ScenarioBasedIT extends RESTCatalogTestBase {
 
+  private static final boolean USE_NATIVE = Boolean.getBoolean("ice.native");
+
   @Override
   protected ScenarioTestRunner createScenarioRunner(String scenarioName) throws Exception {
     Path scenariosDir = getScenariosDirectory();
@@ -42,18 +44,24 @@ protected ScenarioTestRunner createScenarioRunner(String scenarioName) throws Ex
 
     // Try to find ice-jar in the build
     String projectRoot = Paths.get("").toAbsolutePath().getParent().toString();
-    String iceJar = projectRoot + "/ice/target/ice-jar";
+    String iceJar =
+        USE_NATIVE ? projectRoot + "/ice/target/ice" : projectRoot + "/ice/target/ice-jar";
     File iceJarFile = new File(iceJar);
 
-    if (iceJarFile.exists() && iceJarFile.canExecute()) {
-      // Use pre-built ice-jar if available
-      templateVars.put("ICE_CLI", iceJar);
-      logger.info("Using ice-jar from: {}", iceJar);
+    String override = System.getenv("ICE_CLI_OVERRIDE");
+    if (override != null) {
+      templateVars.put("ICE_CLI", override);
     } else {
-      // Fall back to using local-ice wrapper script
-      String localIce = projectRoot + "/.bin/local-ice";
-      templateVars.put("ICE_CLI", localIce);
-      logger.info("Using local-ice script from: {}", localIce);
+      if (iceJarFile.exists() && iceJarFile.canExecute()) {
+        // Use pre-built ice-jar if available
+        templateVars.put("ICE_CLI", iceJar);
+        logger.info("Using ice-jar from: {}", iceJar);
+      } else {
+        // Fall back to using local-ice wrapper script
+        String localIce = projectRoot + "/.bin/local-ice";
+        templateVars.put("ICE_CLI", localIce);
+        logger.info("Using local-ice script from: {}", localIce);
+      }
     }
 
     return new ScenarioTestRunner(scenariosDir, templateVars);

ice-rest-catalog/src/test/resources/scenarios/basic-operations/run.sh.tmpl

@@ -30,6 +30,10 @@ echo "OK list-namespaces listed ${NAMESPACE_NAME}"
 {{ICE_CLI}} --config {{CLI_CONFIG}} describe
 echo "OK Listed namespaces"
 
+# Check configuration
+{{ICE_CLI}} --config {{CLI_CONFIG}} check
+echo "OK checked configuration"
+
 # Explicit create-table (staged create + commit); regression for RESTCatalogAdapter UPDATE_TABLE path
 {{ICE_CLI}} --config {{CLI_CONFIG}} create-table ${TABLE_CREATE_VIA_CLI} --schema-from-parquet "file://${INPUT_PATH}"
 echo "OK create-table ${TABLE_CREATE_VIA_CLI}"