mirror of
https://codeberg.org/gigirassy/pinata
synced 2026-08-30 15:27:39 +00:00
65 lines
1.4 KiB
Docker
65 lines
1.4 KiB
Docker
# syntax=docker/dockerfile:1.4
|
|
FROM --platform=$BUILDPLATFORM chimeralinux/chimera:latest AS builder
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
ARG TARGETVARIANT
|
|
|
|
WORKDIR /src
|
|
COPY go.mod ./
|
|
RUN apk add --no-cache ca-certificates git go && go mod download
|
|
|
|
COPY . .
|
|
RUN CGO_ENABLED=0 \
|
|
GOOS=${TARGETOS:-linux} \
|
|
GOARCH=${TARGETARCH:-amd64} \
|
|
go build -trimpath \
|
|
-ldflags="-s -w -extldflags '-static' -buildid=''" \
|
|
-gcflags="all=-l" \
|
|
-o /pinata ./main.go
|
|
|
|
|
|
FROM chimeralinux/chimera:latest AS runtime
|
|
|
|
RUN apk add --no-cache ca-certificates dnsmasq util-linux
|
|
|
|
COPY --from=builder /pinata /pinata
|
|
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
|
|
RUN mkdir -p /run
|
|
|
|
RUN cat > /entrypoint.sh <<'EOF'
|
|
#!/bin/sh
|
|
set -eu
|
|
|
|
UPSTREAM="/run/dnsmasq.resolv"
|
|
|
|
cp /etc/resolv.conf "$UPSTREAM" || true
|
|
|
|
printf "nameserver 127.0.0.1\noptions timeout:1 attempts:1\n" > /etc/resolv.conf
|
|
|
|
dnsmasq \
|
|
--no-daemon \
|
|
--listen-address=127.0.0.1 \
|
|
--bind-interfaces \
|
|
--cache-size=10000 \
|
|
--neg-ttl=60 \
|
|
--resolv-file="$UPSTREAM" \
|
|
--log-facility=- &
|
|
|
|
DNSMASQ_PID=$!
|
|
trap 'kill $DNSMASQ_PID 2>/dev/null || true' EXIT INT TERM
|
|
|
|
sleep 0.5
|
|
|
|
# Drop privileges (Chimera-compatible)
|
|
exec setpriv --reuid=65532 --regid=65532 --clear-groups /pinata
|
|
EOF
|
|
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
EXPOSE 8080
|
|
|
|
ENV GOMEMLIMIT=8MiB \
|
|
GOGC=20
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"] |