mirror of
https://github.com/dutchcoders/transfer.sh.git
synced 2024-11-22 12:10:18 +01:00
a653181ea8
Running `go mod download` before copying the entire project to the Docker image avoids dependencies from being re-downloaded every time any file is modified, and `docker build` runs again. This follows the steps detailed in the official Docker guide for Go images: https://docs.docker.com/language/golang/build-images/#create-a-dockerfile-for-the-application Also, `GO111MODULE` doesn't make any difference for the supported Go versions, so it can be removed from the Dockerfile.
44 lines
1.3 KiB
Docker
44 lines
1.3 KiB
Docker
# Default to Go 1.20
|
|
ARG GO_VERSION=1.20
|
|
FROM golang:${GO_VERSION}-alpine as build
|
|
|
|
# Necessary to run 'go get' and to compile the linked binary
|
|
RUN apk add git musl-dev mailcap
|
|
|
|
WORKDIR /go/src/github.com/dutchcoders/transfer.sh
|
|
|
|
COPY go.mod go.sum ./
|
|
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
|
|
# build & install server
|
|
RUN CGO_ENABLED=0 go build -tags netgo -ldflags "-X github.com/dutchcoders/transfer.sh/cmd.Version=$(git describe --tags) -a -s -w -extldflags '-static'" -o /go/bin/transfersh
|
|
|
|
ARG PUID=5000 \
|
|
PGID=5000 \
|
|
RUNAS
|
|
|
|
RUN mkdir -p /tmp/useradd /tmp/empty && \
|
|
if [ ! -z "$RUNAS" ]; then \
|
|
echo "${RUNAS}:x:${PUID}:${PGID}::/nonexistent:/sbin/nologin" >> /tmp/useradd/passwd && \
|
|
echo "${RUNAS}:!:::::::" >> /tmp/useradd/shadow && \
|
|
echo "${RUNAS}:x:${PGID}:" >> /tmp/useradd/group && \
|
|
echo "${RUNAS}:!::" >> /tmp/useradd/groupshadow; else touch /tmp/useradd/unused; fi
|
|
|
|
FROM scratch AS final
|
|
LABEL maintainer="Andrea Spacca <andrea.spacca@gmail.com>"
|
|
ARG RUNAS
|
|
|
|
COPY --from=build /etc/mime.types /etc/mime.types
|
|
COPY --from=build /tmp/empty /tmp
|
|
COPY --from=build /tmp/useradd/* /etc/
|
|
COPY --from=build --chown=${RUNAS} /go/bin/transfersh /go/bin/transfersh
|
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
|
|
USER ${RUNAS}
|
|
|
|
ENTRYPOINT ["/go/bin/transfersh", "--listener", ":8080"]
|
|
|
|
EXPOSE 8080
|