-
Notifications
You must be signed in to change notification settings - Fork 5
/
ci.Dockerfile
42 lines (30 loc) · 1.12 KB
/
ci.Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# build app
FROM --platform=$BUILDPLATFORM golang:1.22-alpine3.19 AS app-builder
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . ./
ARG VERSION=dev
ARG REVISION=dev
ARG BUILDTIME
ARG TARGETOS TARGETARCH
RUN --network=none --mount=target=. \
BUILDTIME=$(date -u +"%Y-%m-%dT%H:%M:%SZ") \
REVISION=$(git rev-parse --short HEAD) \
GOOS=$TARGETOS GOARCH=$TARGETARCH \
go build -ldflags "-s -w -X main.version=${VERSION} -X main.commit=${REVISION} -X main.buildDate=${BUILDTIME}" \
-o /out/bin/redactedhook cmd/redactedhook/main.go
# build runner
FROM gcr.io/distroless/static-debian12:nonroot
LABEL org.opencontainers.image.source = "https://github.com/s0up4200/redactedhook"
LABEL org.opencontainers.image.licenses = "MIT"
LABEL org.opencontainers.image.base.name = "distroless/static-debian12:nonroot"
ENV HOME="/redactedhook" \
XDG_CONFIG_HOME="/redactedhook" \
XDG_DATA_HOME="/redactedhook"
WORKDIR /redactedhook
VOLUME /redactedhook
EXPOSE 42135
COPY --from=app-builder /out/bin/redactedhook /usr/local/bin/
USER nobody
ENTRYPOINT ["/usr/local/bin/redactedhook", "--config", "config.toml"]