-
Notifications
You must be signed in to change notification settings - Fork 5
/
prod.Dockerfile
70 lines (50 loc) · 2 KB
/
prod.Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
ARG NODE_TAG=18-slim
FROM node:${NODE_TAG} as Build
ARG BUILD_RELEASE_FROM=master
ENV USER="node"
ENV HOME="/home/${USER}"
ENV GIT_BARE_DIR="${HOME}/git-bare"
ENV ASTROPIKS_DIR="${HOME}/astropiks"
ENV PROXY_DIR="${ASTROPIKS_DIR}/src/proxy/nodejs"
RUN apt update && apt -y upgrade && \
apt -y install \
locales \
git \
curl && \
echo "${LOCALIZATION} ${ENCODING}" > /etc/locale.gen && \
locale-gen "${LOCALIZATION}"
# We should never run containers as root, just like we do not run as root in our PCs and production servers.
# Everything from this line onwards will run in the context of the unprivileged user.
USER "${USER}"
# We need to explicitly create the app dir to have the user `node` ownership, otherwise will have `root` ownership.
RUN mkdir -p "${ASTROPIKS_DIR}"
WORKDIR "${GIT_BARE_DIR}"
COPY --chown="${USER}:${USER}" ./ .
RUN \
git config --global user.email "[email protected]" && \
git config --global user.name "Your Name" && \
git status && \
git add --all && \
git commit -m 'commit changed files and untracked files just in case we will build from current branch.' || true && \
git clone --local "${GIT_BARE_DIR}" "${ASTROPIKS_DIR}" && \
cd "${ASTROPIKS_DIR}" && \
git checkout "${BUILD_RELEASE_FROM}"
WORKDIR "${PROXY_DIR}"
RUN npm install && \
npm run build && \
npm ci --only=production
FROM node:${NODE_TAG}
# For when inspecting the env on the docker container shell
ARG RELEASE_ENV=notset
ENV RELEASE_ENV=${RELEASE_ENV}
ENV USER="node"
ENV HOME="/home/${USER}"
ENV ASTROPIKS_DIR="${HOME}/astropiks"
ENV PROXY_DIR="${ASTROPIKS_DIR}/src/proxy/nodejs"
USER "${USER}"
WORKDIR "${HOME}"/app
COPY --chown="${USER}:${USER}" --from=Build "${PROXY_DIR}"/package.json ./package.json
COPY --chown="${USER}:${USER}" --from=Build "${PROXY_DIR}"/node_modules ./node_modules
COPY --chown="${USER}:${USER}" --from=Build "${PROXY_DIR}"/robots.txt ./dist/robots.txt
COPY --chown="${USER}:${USER}" --from=Build "${PROXY_DIR}"/dist ./dist
CMD [ "npm", "run", "serve" ]