Rogeeandrogee
a5d244d293
* HH-500: add reproducible production dist bundle * HH-500: make production bundle builds reproducible * HH-500: lock complete runtime APK closure --------- Co-authored-by: Rogee <rogee@ipao.vip>
41 lines
1.3 KiB
Docker
41 lines
1.3 KiB
Docker
FROM golang:1.26.6-alpine@sha256:3889b425f035be855a72fb4755265311293b6d414521f0a519d819df32222d83 AS builder
|
|
|
|
ARG SOURCE_DATE_EPOCH=0
|
|
ENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}
|
|
|
|
WORKDIR /src/channels/shangwutong
|
|
|
|
COPY channels/shangwutong/go.mod channels/shangwutong/go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY channels/shangwutong/ ./
|
|
RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -buildvcs=false -tags timetzdata -ldflags="-s -w" -o /out/shangwutong ./cmd/shangwutong
|
|
|
|
FROM alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce
|
|
|
|
ARG VERSION=dev
|
|
ARG COMMIT_SHA=unknown
|
|
ARG BUILD_DATE=unknown
|
|
ARG SOURCE_DATE_EPOCH=0
|
|
LABEL org.opencontainers.image.version="${VERSION}" \
|
|
org.opencontainers.image.revision="${COMMIT_SHA}" \
|
|
org.opencontainers.image.created="${BUILD_DATE}"
|
|
|
|
RUN addgroup -S -g 10001 connector \
|
|
&& adduser -S -D -H -u 10001 -G connector connector \
|
|
&& mkdir -p /data /backup \
|
|
&& chown connector:connector /data /backup \
|
|
&& chmod 0700 /data /backup
|
|
|
|
COPY --from=builder /out/shangwutong /usr/local/bin/shangwutong
|
|
|
|
USER connector:connector
|
|
VOLUME ["/data", "/backup"]
|
|
EXPOSE 9100
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD wget -q -T 3 -O /dev/null http://127.0.0.1:9100/readyz || exit 1
|
|
|
|
ENTRYPOINT ["/usr/local/bin/shangwutong"]
|
|
CMD ["serve"]
|