53 lines
1.2 KiB
Docker
53 lines
1.2 KiB
Docker
# Build stage
|
|
FROM rust:1.82-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Install build dependencies
|
|
RUN apk add --no-cache musl-dev
|
|
|
|
# Copy manifests
|
|
COPY Cargo.toml Cargo.lock ./
|
|
|
|
# Create a dummy main.rs to build dependencies
|
|
RUN mkdir src && echo "fn main() {}" > src/main.rs
|
|
|
|
# Build dependencies (cached layer)
|
|
RUN cargo build --release --target x86_64-unknown-linux-musl
|
|
|
|
# Remove dummy src
|
|
RUN rm -rf src
|
|
|
|
# Copy actual source code
|
|
COPY src ./src
|
|
|
|
# Build the actual application
|
|
RUN touch src/main.rs && cargo build --release --target x86_64-unknown-linux-musl
|
|
|
|
# Runtime stage
|
|
FROM alpine:3.19
|
|
|
|
# Install runtime dependencies
|
|
RUN apk add --no-cache ca-certificates
|
|
|
|
# Create data directory
|
|
RUN mkdir -p /data
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/towerops-agent /usr/local/bin/
|
|
|
|
# Volume for database
|
|
VOLUME ["/data"]
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
|
|
CMD test -f /data/towerops-agent.db || exit 1
|
|
|
|
# Run as non-root user
|
|
RUN addgroup -g 1000 towerops && \
|
|
adduser -D -u 1000 -G towerops towerops && \
|
|
chown -R towerops:towerops /data
|
|
|
|
USER towerops
|
|
|
|
ENTRYPOINT ["towerops-agent"]
|