docker/attest-provider
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add production stage to Dockerfile and tidy up

Browse Source
This commit is contained in:
Jonny Stoten
2024-07-01 10:50:18 +01:00
parent 791215edc2
commit 019df0f616
1 changed files with 14 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
Dockerfile
View File

@@ -1,38 +1,37 @@
ARG BUILDERIMAGE="golang:1.22" ARG BUILDERIMAGE="golang:1.22"
ARG BASEIMAGE="gcr.io/distroless/static:nonroot" ARG BASEIMAGE="gcr.io/distroless/static:nonroot"
FROM ${BUILDERIMAGE} as builder FROM ${BUILDERIMAGE} AS builder
ARG LDFLAGS ENV CGO_ENABLED=0
ENV GO111MODULE=on \
CGO_ENABLED=0
WORKDIR /app WORKDIR /app
COPY . . # --- This block can be removed when github.com/docker/attest is public
# --- This block can be replaced by `RUN go mod download` when github.com/docker/attest is public
ENV GOPRIVATE="github.com/docker/attest" ENV GOPRIVATE="github.com/docker/attest"
RUN --mount=type=cache,target=$GOPATH/pkg/mod --mount=type=secret,id=GITHUB_TOKEN <<EOT RUN --mount=type=secret,id=GITHUB_TOKEN <<EOT
set -e set -e
GITHUB_TOKEN=${GITHUB_TOKEN:-$(cat /run/secrets/GITHUB_TOKEN)} GITHUB_TOKEN=${GITHUB_TOKEN:-$(cat /run/secrets/GITHUB_TOKEN)}
if [ -n "$GITHUB_TOKEN" ]; then if [ -n "$GITHUB_TOKEN" ]; then
echo "Setting GitHub access token" echo "Setting GitHub access token"
git config --global "url.https://x-access-token:${GITHUB_TOKEN}@github.com.insteadof" "https://github.com" git config --global "url.https://x-access-token:${GITHUB_TOKEN}@github.com.insteadof" "https://github.com"
fi fi
go mod download
EOT EOT
# --- # ---
RUN --mount=type=cache,target=$GOPATH/pkg/mod --mount=type=cache,target=/root/.cache/go-build make build RUN --mount=type=bind,source=.,target=/app \
--mount=type=cache,target=$GOPATH/pkg/mod \
--mount=type=cache,target=/root/.cache/go-build \
go build -o /bin/attest main.go
FROM ${BASEIMAGE} FROM ${BASEIMAGE} AS production
COPY --from=builder /app/bin/attest / COPY --from=builder /bin/attest /
COPY --from=builder --chown=65532:65532 /app/certs/tls.crt /app/certs/tls.key /certs/
USER 65532:65532 USER 65532:65532
ENTRYPOINT ["/attest"] ENTRYPOINT ["/attest"]
FROM production AS dev
COPY certs/tls.crt certs/tls.key /certs/