mirror of
https://github.com/skidoodle/safebin.git
synced 2026-04-28 03:07:41 +02:00
43 lines
1.2 KiB
Docker
43 lines
1.2 KiB
Docker
FROM --platform=$BUILDPLATFORM golang:1.25.6-alpine AS builder
|
|
WORKDIR /src
|
|
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
ARG VERSION=dev
|
|
|
|
RUN --mount=type=cache,target=/root/.cache/go-build \
|
|
CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH go build \
|
|
-ldflags="-s -w -X github.com/skidoodle/safebin/internal/app.Version=$VERSION" \
|
|
-trimpath \
|
|
-o /bin/safebin .
|
|
|
|
FROM alpine:latest AS sys-context
|
|
RUN apk add --no-cache ca-certificates mailcap
|
|
RUN echo "appuser:x:10001:10001:appuser:/:/sbin/nologin" > /etc/passwd_app \
|
|
&& echo "appuser:x:10001:appuser" > /etc/group_app
|
|
RUN mkdir -p /app/storage
|
|
|
|
FROM scratch
|
|
COPY --from=sys-context /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
|
|
COPY --from=sys-context /etc/mime.types /etc/mime.types
|
|
COPY --from=sys-context /etc/passwd_app /etc/passwd
|
|
COPY --from=sys-context /etc/group_app /etc/group
|
|
COPY --from=builder /bin/safebin /app/safebin
|
|
COPY --from=sys-context --chown=10001:10001 /app/storage /app/storage
|
|
|
|
WORKDIR /app
|
|
USER 10001
|
|
VOLUME ["/app/storage"]
|
|
EXPOSE 8080
|
|
|
|
ENV SAFEBIN_HOST=0.0.0.0 \
|
|
SAFEBIN_PORT=8080 \
|
|
SAFEBIN_STORAGE=/app/storage
|
|
|
|
ENTRYPOINT ["/app/safebin"]
|