FROM 11notes/alpine:stable as builder                                                                             

USER root

RUN apk update && apk add ca-certificates musl-dev build-base openssl-dev curl

ENV PATH="/root/.cargo/bin:${PATH}"

WORKDIR /app
COPY Cargo.toml .
COPY src ./src

RUN curl https://sh.rustup.rs -sSf | sh -s -- -y

RUN rustup target add x86_64-unknown-linux-musl

RUN RUSTFLAGS="-Ctarget-feature=+crt-static" cargo build --release --target x86_64-unknown-linux-musl 

FROM scratch

USER 65534:65534

COPY --from=builder --chown=65534:65534 /app/target/x86_64-unknown-linux-musl/release/image-proxy /usr/bin/image-proxy

COPY --from=builder /etc/ssl /etc/ssl

EXPOSE 8080

ENTRYPOINT ["/usr/bin/image-proxy"]