dateilager/Dockerfile at main · gadget-inc/dateilager · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
FROM nixos/nix:2.22.0 AS build-stage
ARG TARGETARCH

RUN tee -a /etc/nix/nix.conf <<EOF
experimental-features = nix-command flakes
filter-syscalls = false
EOF

WORKDIR /app

COPY flake.nix flake.lock  ./
COPY development ./development

# Setup the nix environment in an early layer
RUN nix develop --command "true"

# Create a custom shell script that activates nix develop for any RUN command
RUN echo '#!/usr/bin/env bash' > /bin/nix-env-shell \
    && echo 'exec nix develop --command bash -c "$@"' >> /bin/nix-env-shell \
    && chmod +x /bin/nix-env-shell

SHELL ["/bin/nix-env-shell"]

# copy the go modules and download em
COPY go.mod go.sum ./
RUN go mod download

# copy everything else and build the project
COPY . ./
RUN make release/server_linux_$TARGETARCH release/cached_linux_$TARGETARCH

FROM buildpack-deps:bookworm AS build-release-stage
ARG TARGETARCH

RUN apt-get update && \
    apt-get install -y curl findutils gzip kmod less net-tools postgresql procps tar time udev && \
    rm -rf /var/cache/apt/archives /var/lib/apt/lists/*

# ------------------------------------------------------------------------
# Newer LVM userspace (>= 2.03.18) is required to support write-cache on
# thin-pools.  Debian bullseye only ships 2.03.11, so we pull lvm2 from the
# "testing" (currently trixie) suite and keep everything else on stable.
# ------------------------------------------------------------------------
# 1. Add testing repository with a lower pin priority so only explicitly
#    requested packages come from it.
# 2. Install lvm2 (+ thin-provisioning-tools dependency).

RUN echo "deb http://deb.debian.org/debian testing main" > /etc/apt/sources.list.d/testing.list && \
printf 'Package: *\nPin: release a=testing\nPin-Priority: 90\n' > /etc/apt/preferences.d/limit-testing && \
apt-get update && \
apt-get install -y --no-install-recommends -t testing lvm2 thin-provisioning-tools && \
apt-get clean && rm -rf /var/lib/apt/lists/* && \
mkdir -p /lvm-tmp/lvm && \
cp -r /etc/lvm /lvm-tmp/lvm

RUN GRPC_HEALTH_PROBE_VERSION=v0.4.23 \
    && curl -Lfso /bin/grpc_health_probe https://github.com/grpc-ecosystem/grpc-health-probe/releases/download/${GRPC_HEALTH_PROBE_VERSION}/grpc_health_probe-linux-${TARGETARCH} \
    && chmod +x /bin/grpc_health_probe

RUN GO_MIGRATE_VERSION=v4.17.1 \
    && curl -Lfso /tmp/migrate.tar.gz https://github.com/golang-migrate/migrate/releases/download/${GO_MIGRATE_VERSION}/migrate.linux-${TARGETARCH}.tar.gz \
    && tar -xzf /tmp/migrate.tar.gz -C /bin \
    && chmod +x /bin/migrate

RUN useradd -ms /bin/bash main
USER main
WORKDIR /home/main

RUN mkdir -p /home/main/secrets
VOLUME /home/main/secrets/tls
VOLUME /home/main/secrets/paseto

COPY --from=build-stage /app/release/cached_linux_${TARGETARCH} cached
COPY --from=build-stage /app/release/server_linux_${TARGETARCH} server

COPY migrations migrations
COPY entrypoint.sh entrypoint.sh
COPY entrypoint-cached.sh entrypoint-cached.sh

# smoke test -- ensure the commands can run
RUN ./server --help
RUN ./cached --help

ENTRYPOINT ["./entrypoint.sh"]