mirror of
https://github.com/hay-kot/homebox.git
synced 2024-12-18 21:16:31 +00:00
387d52c2fc
Solution for #890 Based on https://github.com/GoogleContainerTools/distroless/issues/183#issuecomment-823181507
68 lines
2 KiB
Text
68 lines
2 KiB
Text
|
|
# Build Nuxt
|
|
FROM node:17-alpine as frontend-builder
|
|
WORKDIR /app
|
|
RUN npm install -g pnpm
|
|
COPY frontend/package.json frontend/pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile --shamefully-hoist
|
|
COPY frontend .
|
|
RUN pnpm build
|
|
|
|
# Build API
|
|
FROM golang:alpine AS builder
|
|
ARG BUILD_TIME
|
|
ARG COMMIT
|
|
ARG VERSION
|
|
ARG BUSYBOX_VERSION=1.31.0-i686-uclibc
|
|
RUN apk update && \
|
|
apk upgrade && \
|
|
apk add --update git build-base gcc g++
|
|
|
|
WORKDIR /go/src/app
|
|
COPY ./backend .
|
|
RUN go get -d -v ./...
|
|
RUN rm -rf ./app/api/public
|
|
COPY --from=frontend-builder /app/.output/public ./app/api/static/public
|
|
RUN CGO_ENABLED=0 GOOS=linux go build \
|
|
-ldflags "-s -w -X main.commit=$COMMIT -X main.buildTime=$BUILD_TIME -X main.version=$VERSION" \
|
|
-o /go/bin/api \
|
|
-v ./app/api/*.go && \
|
|
chmod +x /go/bin/api && \
|
|
# create a directory so that we can copy it in the next stage
|
|
mkdir /data
|
|
|
|
# Downloading Wget
|
|
ADD https://busybox.net/downloads/binaries/$BUSYBOX_VERSION/busybox_WGET /wget
|
|
RUN chmod a+x /wget
|
|
|
|
FROM gcr.io/distroless/java
|
|
|
|
COPY --from=builder /wget /usr/bin/wget
|
|
|
|
# Production Stage
|
|
FROM gcr.io/distroless/static
|
|
|
|
ENV HBOX_MODE=production
|
|
ENV HBOX_STORAGE_DATA=/data/
|
|
ENV HBOX_STORAGE_SQLITE_URL=/data/homebox.db?_fk=1
|
|
|
|
# Copy the binary and the (empty) /data dir and
|
|
# change the ownership to the low-privileged user
|
|
COPY --from=builder --chown=nonroot /go/bin/api /app
|
|
COPY --from=builder --chown=nonroot /data /data
|
|
COPY --from=builder --chown=nonroot /wget /usr/bin/wget
|
|
|
|
LABEL Name=homebox Version=0.0.1
|
|
LABEL org.opencontainers.image.source="https://github.com/hay-kot/homebox"
|
|
EXPOSE 7745
|
|
HEALTHCHECK --interval=30s \
|
|
--timeout=5s \
|
|
--start-period=5s \
|
|
--retries=3 \
|
|
CMD [ "/usr/bin/wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:7745" ]
|
|
VOLUME [ "/data" ]
|
|
|
|
# Drop root and run as low-privileged user
|
|
USER nonroot
|
|
ENTRYPOINT [ "/app" ]
|
|
CMD [ "/data/config.yml" ]
|