49 lines
1017 B
Docker
49 lines
1017 B
Docker
|
# set app name
|
||
|
|
ARG app=roulette
|
||
|
|
|
||
|
|
# create build stage
|
||
|
|
ARG TAG
|
||
|
|
FROM --platform=$BUILDPLATFORM golang:$TAG AS build
|
||
|
|
ARG app
|
||
|
|
|
||
|
|
# install dependencies
|
||
|
|
RUN apk add --update-cache git upx
|
||
|
|
|
||
|
|
# clone
|
||
|
|
RUN git clone https://git.seedno.de/seednode/$app /src/$app
|
||
|
|
|
||
|
|
# build and compress the binary
|
||
|
|
WORKDIR /src/$app
|
||
|
|
ARG TARGETOS TARGETARCH
|
||
|
|
RUN CGO_ENABLED=0 \
|
||
|
|
GOOS=$TARGETOS \
|
||
|
|
GOARCH=$TARGETARCH \
|
||
|
|
go build -trimpath -ldflags "-s -w" -o $app \
|
||
|
|
&& upx --best --lzma $app \
|
||
|
|
&& chmod 500 $app
|
||
|
|
|
||
|
|
# set up final stage
|
||
|
|
FROM --platform=$BUILDPLATFORM alpine:latest
|
||
|
|
ARG app
|
||
|
|
|
||
|
|
# copy in user info
|
||
|
|
COPY --chown=root:root --chmod=0400 passwd /etc/passwd
|
||
|
|
|
||
|
|
# run as nonroot
|
||
|
|
USER nonroot
|
||
|
|
|
||
|
|
# copy in binary
|
||
|
|
COPY --from=build --chown=root:root --chmod=0005 /src/$app/$app /$app
|
||
|
|
|
||
|
|
# copy in time zone info
|
||
|
|
COPY --from=build --chown=root:root --chmod=0004 /usr/local/go/lib/time/zoneinfo.zip /
|
||
|
|
|
||
|
|
# load time zone info
|
||
|
|
ENV ZONEINFO=/zoneinfo.zip
|
||
|
|
|
||
|
|
# listen on an unprivileged port
|
||
|
|
EXPOSE 8080
|
||
|
|
|
||
|
|
# run application
|
||
|
|
ENTRYPOINT ["/bin/ash"]
|