32 lines
941 B
Docker
32 lines
941 B
Docker
FROM docker.io/rustlang/rust:nightly AS chef
|
|
WORKDIR /app
|
|
RUN cargo install cargo-chef && rm -rf $CARGO_HOME/registry/
|
|
|
|
FROM chef AS planner
|
|
COPY . .
|
|
RUN cargo chef prepare --recipe-path recipe.json
|
|
|
|
FROM chef AS builder
|
|
COPY --from=planner /app/recipe.json recipe.json
|
|
# Build dependencies - this is the caching Docker layer!
|
|
RUN cargo chef cook --release --recipe-path recipe.json
|
|
# Build application
|
|
COPY . .
|
|
RUN cargo build --release --bin phono-server
|
|
|
|
# We do not need the Rust toolchain to run the binary!
|
|
FROM debian:bookworm-slim AS runtime
|
|
RUN apt-get update && apt-get install -y libpq-dev ca-certificates
|
|
|
|
# User should be set by UID to make the K8s `runAsNonRoot` check's job easier.
|
|
RUN useradd -m -u 1000 app
|
|
USER 1000
|
|
|
|
WORKDIR /home/app
|
|
COPY --from=builder /app/target/release/phono-server /usr/local/bin
|
|
|
|
COPY ./css_dist ./css_dist
|
|
COPY ./js_dist ./js_dist
|
|
COPY ./static ./static
|
|
|
|
ENTRYPOINT ["/usr/local/bin/phono-server"]
|