Mats Törnberg
f5014fe906
Co-authored-by: matst80 <mats.tornberg@gmail.com> Reviewed-on: https://git.tornberg.me/mats/go-cart-actor/pulls/4 Co-authored-by: Mats Törnberg <mats@tornberg.me> Co-committed-by: Mats Törnberg <mats@tornberg.me>
76 lines
2.4 KiB
Docker
76 lines
2.4 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
#
|
|
# Multi-stage build:
|
|
# 1. Build static binary with pinned Go version (matching go.mod).
|
|
# 2. Copy into distroless static nonroot runtime image.
|
|
#
|
|
# Build args (optional):
|
|
# VERSION - semantic/app version (default: dev)
|
|
# GIT_COMMIT - git SHA (default: unknown)
|
|
# BUILD_DATE - RFC3339 build timestamp
|
|
#
|
|
# Example build:
|
|
# docker build \
|
|
# --build-arg VERSION=$(git describe --tags --always) \
|
|
# --build-arg GIT_COMMIT=$(git rev-parse HEAD) \
|
|
# --build-arg BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ) \
|
|
# -t go-cart-actor:dev .
|
|
#
|
|
# If you add subpackages or directories, no Dockerfile change needed (COPY . .).
|
|
# Ensure a .dockerignore exists to keep context lean.
|
|
|
|
############################
|
|
# Build Stage
|
|
############################
|
|
FROM golang:1.25-alpine AS build
|
|
WORKDIR /src
|
|
|
|
# Build metadata (can be overridden at build time)
|
|
ARG VERSION=dev
|
|
ARG GIT_COMMIT=unknown
|
|
ARG BUILD_DATE=unknown
|
|
|
|
# Ensure reproducible static build
|
|
# Multi-arch build args (TARGETOS/TARGETARCH provided automatically by buildx)
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
ENV CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH}
|
|
|
|
# Dependency caching
|
|
COPY go.mod go.sum ./
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
go mod download
|
|
|
|
# Copy full source (relay on .dockerignore to prune)
|
|
COPY . .
|
|
|
|
# (Optional) If you do NOT check in generated protobuf code, uncomment generation:
|
|
# RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@latest && \
|
|
# go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest && \
|
|
# protoc --go_out=. --go_opt=paths=source_relative \
|
|
# --go-grpc_out=. --go-grpc_opt=paths=source_relative \
|
|
# proto/*.proto
|
|
|
|
# Build with minimal binary size and embedded metadata
|
|
RUN --mount=type=cache,target=/go/build-cache \
|
|
go build -trimpath -ldflags="-s -w \
|
|
-X main.Version=${VERSION} \
|
|
-X main.GitCommit=${GIT_COMMIT} \
|
|
-X main.BuildDate=${BUILD_DATE}" \
|
|
-o /out/go-cart-actor ./cmd/cart
|
|
|
|
############################
|
|
# Runtime Stage
|
|
############################
|
|
# Using distroless static (nonroot) for minimal surface area.
|
|
FROM gcr.io/distroless/static-debian12:nonroot AS runtime
|
|
WORKDIR /
|
|
|
|
COPY --from=build /out/go-cart-actor /go-cart-actor
|
|
|
|
# Document (not expose forcibly) typical ports: 8080 (HTTP), 1337 (gRPC)
|
|
EXPOSE 8080 1337
|
|
|
|
USER nonroot:nonroot
|
|
ENTRYPOINT ["/go-cart-actor"]
|