phonograph/Containerfile

FROM docker.io/rustlang/rust:nightly AS chef
WORKDIR /app
RUN cargo install cargo-chef && rm -rf $CARGO_HOME/registry/

FROM chef AS planner
COPY . .
RUN cargo chef prepare --recipe-path recipe.json

FROM chef AS builder
COPY --from=planner /app/recipe.json recipe.json
# Build dependencies - this is the caching Docker layer!
RUN cargo chef cook --release --recipe-path recipe.json
# Build application
COPY . .
RUN cargo build --release --bin phono-server

# We do not need the Rust toolchain to run the binary!
FROM debian:bookworm-slim AS runtime
RUN apt-get update && apt-get install -y libpq-dev ca-certificates

# User should be set by UID to make the K8s `runAsNonRoot` check's job easier.
RUN useradd -m -u 1000 app
USER 1000

WORKDIR /home/app
COPY --from=builder /app/target/release/phono-server /usr/local/bin

COPY ./css_dist ./css_dist
COPY ./js_dist ./js_dist
COPY ./static ./static

ENTRYPOINT ["/usr/local/bin/phono-server"]