real

Dockerfile.release

@@ -0,0 +1,26 @@
+FROM alpine:latest AS sys-context
+
+RUN apk add --no-cache ca-certificates tzdata
+
+RUN echo "appuser:x:10001:10001:appuser:/:/sbin/nologin" > /etc/passwd_app \
+    && echo "appuser:x:10001:appuser" > /etc/group_app
+
+RUN mkdir -p /app/data && chown -R 10001:10001 /app
+
+FROM scratch
+
+COPY --from=sys-context /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=sys-context /usr/share/zoneinfo /usr/share/zoneinfo
+COPY --from=sys-context /etc/passwd_app /etc/passwd
+COPY --from=sys-context /etc/group_app /etc/group
+COPY --from=sys-context --chown=10001:10001 /app /app
+
+# Binaries and static files provided by goreleaser
+COPY --chown=10001:10001 ncore-stats /app/ncore-stats
+COPY --chown=10001:10001 web /app/web
+
+WORKDIR /app
+USER 10001
+EXPOSE 3000
+
+ENTRYPOINT ["/app/ncore-stats"]