56 lines
1 KiB
Text
56 lines
1 KiB
Text
|
# Build stage
|
||
|
|
FROM docker.io/rust:1-alpine AS builder
|
||
|
|
|
||
|
|
# Install build dependencies
|
||
|
|
RUN apk add --no-cache musl-dev
|
||
|
|
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
# Copy manifests
|
||
|
|
COPY Cargo.toml ./
|
||
|
|
|
||
|
|
# Create dummy main.rs for dependency caching
|
||
|
|
RUN mkdir src && echo "fn main() {}" > src/main.rs
|
||
|
|
|
||
|
|
# Build dependencies
|
||
|
|
RUN cargo build --release
|
||
|
|
RUN rm -rf src
|
||
|
|
|
||
|
|
# Copy source code
|
||
|
|
COPY src ./src
|
||
|
|
|
||
|
|
# Touch main.rs to ensure rebuild
|
||
|
|
RUN touch src/main.rs
|
||
|
|
|
||
|
|
# Build the application
|
||
|
|
RUN cargo build --release
|
||
|
|
|
||
|
|
# Runtime stage
|
||
|
|
FROM docker.io/alpine:latest
|
||
|
|
|
||
|
|
# Install runtime dependencies
|
||
|
|
RUN apk add --no-cache ca-certificates
|
||
|
|
|
||
|
|
# Create non-root user
|
||
|
|
RUN adduser -D -u 1000 naas
|
||
|
|
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
# Copy binary from builder
|
||
|
|
COPY --from=builder /app/target/release/naas /app/naas
|
||
|
|
RUN chmod +x /app/naas
|
||
|
|
|
||
|
|
# Change ownership
|
||
|
|
RUN chown -R naas:naas /app
|
||
|
|
|
||
|
|
USER naas
|
||
|
|
|
||
|
|
# Expose port
|
||
|
|
EXPOSE 8080
|
||
|
|
|
||
|
|
# Health check
|
||
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
||
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost:8080/health || exit 1
|
||
|
|
|
||
|
|
# Run the application
|
||
|
|
CMD ["./naas"]
|