Eric Rakestraw
33c35b5f4a
All checks were successful
ci/woodpecker/manual/build-image Pipeline was successful
79 lines
2.0 KiB
Docker
79 lines
2.0 KiB
Docker
# syntax=docker/dockerfile:1.6
|
|
|
|
ARG GO_VERSION=1.25
|
|
|
|
############################
|
|
# Build stage
|
|
############################
|
|
FROM golang:${GO_VERSION}-bookworm AS build
|
|
|
|
WORKDIR /src
|
|
|
|
# Install baseline packages
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates tzdata git build-essential \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Cache dependencies first
|
|
COPY go.mod go.sum ./
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
go mod download
|
|
|
|
# Copy the rest of the source
|
|
COPY . .
|
|
|
|
# Ensure go.sum is complete after dropping the replace
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build
|
|
|
|
# Default to a static build (no CGO)
|
|
# If errors, can build with: --build-arg CGO_ENABLED=1
|
|
ARG CGO_ENABLED=0
|
|
ARG TARGETOS=linux
|
|
ARG TARGETARCH=amd64
|
|
ENV CGO_ENABLED=${CGO_ENABLED} \
|
|
GOOS=${TARGETOS} \
|
|
GOARCH=${TARGETARCH}
|
|
|
|
# Run tests before building the final binary
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
go test ./...
|
|
|
|
# Build the cmd entrypoint
|
|
RUN --mount=type=cache,target=/root/.cache/go-build \
|
|
go build \
|
|
-trimpath \
|
|
-ldflags="-s -w" \
|
|
-o /out/weatherfeeder \
|
|
./cmd/weatherfeeder
|
|
|
|
|
|
############################
|
|
# Runtime stage
|
|
############################
|
|
FROM debian:bookworm-slim AS runtime
|
|
|
|
# Install runtime necessities
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates tzdata curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Define /weatherfeeder as the working directory
|
|
WORKDIR /weatherfeeder
|
|
|
|
# Create an unprivileged user
|
|
RUN useradd \
|
|
--uid 10001 \
|
|
--no-create-home \
|
|
--shell /usr/sbin/nologin \
|
|
weatherfeeder
|
|
|
|
# Copy the binary
|
|
COPY --chown=weatherfeeder:weatherfeeder --from=build /out/weatherfeeder /weatherfeeder/weatherfeeder
|
|
|
|
USER weatherfeeder
|
|
|
|
# The application expects config.yml in the same directory as the binary
|
|
ENTRYPOINT ["/weatherfeeder/weatherfeeder"]
|