76bd462cf8
- This is just stab at a starting place because it felt easier to put something down on paper than to keep staring at a blank page
40 lines
1.4 KiB
Docker
40 lines
1.4 KiB
Docker
# Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
FROM golang:1.15.2 as build-env
|
|
|
|
WORKDIR /work
|
|
# Get dependencies first so they can be cached as a layer
|
|
COPY go.* ./
|
|
COPY generated/1.19/apis/go.* ./generated/1.19/apis/
|
|
COPY generated/1.19/client/go.* ./generated/1.19/client/
|
|
RUN go mod download
|
|
|
|
# Copy only the production source code to avoid cache misses when editing other files
|
|
COPY generated ./generated
|
|
COPY cmd ./cmd
|
|
COPY internal ./internal
|
|
COPY pkg ./pkg
|
|
COPY tools ./tools
|
|
COPY hack ./hack
|
|
|
|
# Build the executable binary (CGO_ENABLED=0 means static linking)
|
|
RUN mkdir out \
|
|
&& CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "$(hack/get-ldflags.sh)" -o out ./cmd/pinniped-server/... \
|
|
&& CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "$(hack/get-ldflags.sh)" -o out ./cmd/pinniped-supervisor/... \
|
|
&& CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o out ./cmd/local-user-authenticator/...
|
|
|
|
# Use a runtime image based on Debian slim
|
|
FROM debian:10.5-slim
|
|
|
|
# Copy the binaries from the build-env stage
|
|
COPY --from=build-env /work/out/pinniped-server /usr/local/bin/pinniped-server
|
|
COPY --from=build-env /work/out/pinniped-supervisor /usr/local/bin/pinniped-supervisor
|
|
COPY --from=build-env /work/out/local-user-authenticator /usr/local/bin/local-user-authenticator
|
|
|
|
# Document the port
|
|
EXPOSE 443
|
|
|
|
# Set the entrypoint
|
|
ENTRYPOINT ["/usr/local/bin/pinniped-server"]
|