mirror of
https://forgejo.ellis.link/continuwuation/continuwuity.git
synced 2025-07-06 22:46:12 +02:00
81 lines
2.6 KiB
Docker
81 lines
2.6 KiB
Docker
FROM rust:latest AS builder
|
|
|
|
# install build-time deps
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
lld \
|
|
libclang-dev liburing-dev
|
|
|
|
# Set up Rust toolchain
|
|
WORKDIR /app
|
|
COPY ./rust-toolchain.toml .
|
|
RUN rustc --version
|
|
|
|
# Developer tool versions
|
|
# renovate: datasource=github-releases depName=cargo-binstall packageName=cargo-bins/cargo-binstall
|
|
ENV BINSTALL_VERSION=1.10.17
|
|
# renovate: github-releases depName=cargo-sbom packageName=psastras/sbom-rs
|
|
ENV CARGO_SBOM_VERSION=0.9.1
|
|
|
|
RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
|
|
RUN cargo binstall --no-confirm cargo-sbom --version $CARGO_SBOM_VERSION
|
|
|
|
# Get source
|
|
COPY . .
|
|
|
|
# Build binary
|
|
# We disable incremental compilation to save disk space, as it only produces a minimal speedup for this case.
|
|
ENV CARGO_INCREMENTAL=0
|
|
|
|
ARG TARGET_CPU
|
|
RUN if [ -n "${TARGET_CPU}" ]; then \
|
|
echo "CFLAGS='-march=${TARGET_CPU}'" >> /etc/environment && \
|
|
echo "CXXFLAGS='-march=${TARGET_CPU}'" >> /etc/environment && \
|
|
echo "RUSTFLAGS='-C target-cpu=${TARGET_CPU}'" >> /etc/environment; \
|
|
fi
|
|
|
|
RUN mkdir /out
|
|
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
|
--mount=type=cache,target=/usr/local/cargo/git/db \
|
|
--mount=type=cache,target=/app/target \
|
|
set -o allexport && \
|
|
. /etc/environment && \
|
|
cargo build --locked --release && \
|
|
cp ./target/release/conduwuit /out/app
|
|
|
|
RUN cargo sbom > /out/sbom.spdx.json
|
|
|
|
# find dynamically linked dependencies
|
|
RUN mkdir /out/libs \
|
|
&& ldd /out/app | grep '=>' | awk '{print $(NF-1)}' | xargs -I {} cp {} /out/libs/
|
|
# libraries with a hardcoded path, like ld
|
|
# (see for example https://github.com/vlang/v/issues/8682)
|
|
# Excluding linux-vdso.so, as it is a part of the kernel
|
|
RUN mkdir /out/libs-root \
|
|
&& ldd /out/app | grep -v '=>' | grep -v 'linux-vdso.so' | awk '{print $(NF-1)}' | xargs -I {} install -D {} /out/libs-root{}
|
|
# RUN ldd /out/app
|
|
# ldd /out/app | grep -v 'linux-vdso.so' | awk '{print $(NF-1)}'
|
|
# RUN ls /libs
|
|
|
|
FROM scratch
|
|
|
|
WORKDIR /
|
|
|
|
# Copy root certs for tls into image
|
|
# You can also mount the certs from the host
|
|
# --volume /etc/ssl/certs:/etc/ssl/certs:ro
|
|
COPY --from=rust:latest /etc/ssl/certs /etc/ssl/certs
|
|
|
|
# Copy our build
|
|
COPY --from=builder /out/app ./app
|
|
# Copy SBOM
|
|
COPY --from=builder /out/sbom.spdx.json ./sbom.spdx.json
|
|
|
|
# Copy hardcoded dynamic libraries
|
|
COPY --from=builder /out/libs-root /
|
|
# Copy dynamic libraries
|
|
COPY --from=builder /out/libs /libs
|
|
# Tell Linux where to find our libraries
|
|
ENV LD_LIBRARY_PATH=/libs
|
|
|
|
|
|
CMD ["/app"]
|