-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDockerfile
130 lines (103 loc) · 4.57 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
# -- Common Build Base
# Build the manager binary
FROM golang:1.22 as build-base
ARG TARGETOS
ARG TARGETARCH
WORKDIR /workspace
# Copy the Go Modules manifests
COPY go.mod go.mod
COPY go.sum go.sum
# cache deps before building and copying source so that we don't need to re-download as much
# and so that source changes don't invalidate our downloaded layer
RUN go mod download
# -- Operator
FROM build-base as build-operator
# Copy the go source
COPY cmd/operator/main.go cmd/operator/main.go
COPY api/ api/
COPY internal/ internal/
COPY pkg/ pkg/
# Build
# the GOARCH has not a default value to allow the binary be built according to the host where the command
# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o manager cmd/operator/main.go
# Use distroless as minimal base image to package the manager binary
# Refer to https://github.com/GoogleContainerTools/distroless for more details
FROM gcr.io/distroless/static:nonroot as operator
WORKDIR /
COPY --from=build-operator /workspace/manager .
USER 65532:65532
ENTRYPOINT ["/manager"]
# -- Builder
FROM build-base as build-builder
# Copy the go source
COPY cmd/builder/main.go cmd/builder/main.go
COPY api/ api/
COPY internal/ internal/
# Build
# the GOARCH has not a default value to allow the binary be built according to the host where the command
# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o builder cmd/builder/main.go
FROM alpine:3 as builder
# Git is not required by the builder and run without it as the
# the builder is using a go native git implementation.
# However, buildx uses git, so as long as we use buildx, git is
# a hard dependency.
RUN apk update && apk upgrade --no-cache
RUN apk add --no-cache git
WORKDIR /
COPY --from=build-builder /workspace/builder .
COPY --from=docker/buildx-bin /buildx /usr/bin/buildx
# USER user:user
ENTRYPOINT ["/builder"]
# -- DNS
FROM build-base as build-dns
# Copy the go source
COPY cmd/dns/main.go cmd/dns/main.go
COPY api/ api/
COPY internal/ internal/
COPY pkg/ pkg/
# Build
# the GOARCH has not a default value to allow the binary be built according to the host where the command
# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o dns cmd/dns/main.go
FROM alpine:3 as dns
# Git is not required by the builder and run without it as the
# the builder is using a go native git implementation.
# However, buildx uses git, so as long as we use buildx, git is
# a hard dependency.
RUN apk update && apk upgrade --no-cache
RUN apk add --no-cache git
WORKDIR /
COPY --from=build-dns /workspace/dns .
USER 65532:65532
ENTRYPOINT ["/dns"]
# -- Solver
FROM build-base as build-solver
# Copy the go source
COPY cmd/solver/main.go cmd/solver/main.go
COPY api/ api/
COPY pkg/ pkg/
# Build
# the GOARCH has not a default value to allow the binary be built according to the host where the command
# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o solver cmd/solver/main.go
FROM alpine:3 as solver
# Git is not required by the builder and run without it as the
# the builder is using a go native git implementation.
# However, buildx uses git, so as long as we use buildx, git is
# a hard dependency.
RUN apk update && apk upgrade --no-cache
RUN apk add --no-cache git
WORKDIR /
COPY --from=build-solver /workspace/solver .
# USER user:user
ENTRYPOINT ["/solver"]