45 lines
962 B
Plaintext
45 lines
962 B
Plaintext
# Build stage
|
|
# FROM golang:1.23-bullseye as base
|
|
FROM golang:bullseye as base
|
|
|
|
RUN adduser \
|
|
--disabled-password \
|
|
--gecos "" \
|
|
--home "/nonexistent" \
|
|
--shell "/sbin/nologin" \
|
|
--no-create-home \
|
|
--uid 65532 \
|
|
small-user
|
|
|
|
WORKDIR /app
|
|
|
|
COPY . .
|
|
|
|
# RUN go mod download
|
|
# RUN go mod verify
|
|
|
|
RUN GOFLAGS=-mod=vendor CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o main .
|
|
|
|
# Final stage
|
|
# Pick your poison
|
|
# Ordered by size desc
|
|
# FROM ubuntu:latest
|
|
# FROM alpine:latest
|
|
FROM scratch
|
|
|
|
# Run this for ubuntu
|
|
# RUN apt-get update && apt-get install -y curl vim git && apt-get clean
|
|
|
|
# Copy the binary from the build stage
|
|
COPY --from=base /app/main /main
|
|
|
|
# Copy necessary files from the build stage
|
|
COPY --from=base /usr/share/zoneinfo /usr/share/zoneinfo
|
|
COPY --from=base /etc/passwd /etc/passwd
|
|
COPY --from=base /etc/group /etc/group
|
|
|
|
# Use the non-root user
|
|
# USER small-user
|
|
EXPOSE 8090
|
|
|
|
CMD ["/main"] |