|
|
|
@ -2,33 +2,37 @@ |
|
|
|
# https://docs.docker.com/develop/develop-images/multistage-build/ |
|
|
|
# https://whitfin.io/speeding-up-rust-docker-builds/ |
|
|
|
####################### VAULT BUILD IMAGE ####################### |
|
|
|
{% set build_stage_base_image = "rust:1.40" %} |
|
|
|
{% set vault_stage_base_image = build_stage_base_image %} |
|
|
|
{% if "alpine" in target_file %} |
|
|
|
{% set preferred_base_image = "alpine:3.11" %} |
|
|
|
{% set build_stage_base_image = "clux/muslrust:nightly-2019-12-19" %} |
|
|
|
{% set runtime_stage_base_image = "alpine:3.11" %} |
|
|
|
{% set vault_stage_base_image = runtime_stage_base_image %} |
|
|
|
{% set package_arch_name = "" %} |
|
|
|
{% elif "amd64" in target_file %} |
|
|
|
{% set preferred_base_image = "debian:buster-slim" %} |
|
|
|
{% set runtime_stage_base_image = "debian:buster-slim" %} |
|
|
|
{% set package_arch_name = "" %} |
|
|
|
{% elif "aarch64" in target_file %} |
|
|
|
{% set preferred_base_image = "balenalib/aarch64-debian:buster" %} |
|
|
|
{% set runtime_stage_base_image = "balenalib/aarch64-debian:buster" %} |
|
|
|
{% set package_arch_name = "arm64" %} |
|
|
|
{% elif "armv6" in target_file %} |
|
|
|
{% set preferred_base_image = "balenalib/rpi-debian:buster" %} |
|
|
|
{% set runtime_stage_base_image = "balenalib/rpi-debian:buster" %} |
|
|
|
{% set package_arch_name = "armel" %} |
|
|
|
{% elif "armv7" in target_file %} |
|
|
|
{% set preferred_base_image = "balenalib/armv7hf-debian:buster" %} |
|
|
|
{% set runtime_stage_base_image = "balenalib/armv7hf-debian:buster" %} |
|
|
|
{% set package_arch_name = "armhf" %} |
|
|
|
{% endif %} |
|
|
|
{% set package_arch_prefix = ":" + package_arch_name %} |
|
|
|
{% if package_arch_name == "" %} |
|
|
|
{% set package_arch_prefix = "" %} |
|
|
|
{% endif %} |
|
|
|
FROM {{ preferred_base_image }} as vault |
|
|
|
FROM {{ vault_stage_base_image }} as vault |
|
|
|
|
|
|
|
ENV VAULT_VERSION "v2.12.0b" |
|
|
|
|
|
|
|
ENV URL "https://github.com/dani-garcia/bw_web_builds/releases/download/$VAULT_VERSION/bw_web_$VAULT_VERSION.tar.gz" |
|
|
|
|
|
|
|
{% if "alpine" in target_file %} |
|
|
|
{% if "alpine" in vault_stage_base_image %} |
|
|
|
RUN apk add --no-cache --upgrade \ |
|
|
|
curl \ |
|
|
|
tar |
|
|
|
@ -47,7 +51,7 @@ RUN apt update -y \ |
|
|
|
RUN mkdir /web-vault |
|
|
|
WORKDIR /web-vault |
|
|
|
|
|
|
|
{% if "alpine" in target_file %} |
|
|
|
{% if "alpine" in vault_stage_base_image %} |
|
|
|
SHELL ["/bin/ash", "-o", "nounset", "-o", "pipefail", "-o", "errexit", "-c"] |
|
|
|
{% else %} |
|
|
|
SHELL ["/bin/bash", "-o", "nounset", "-o", "pipefail", "-o", "errexit", "-c"] |
|
|
|
@ -57,14 +61,13 @@ RUN curl -L $URL | tar xz |
|
|
|
RUN ls |
|
|
|
|
|
|
|
########################## BUILD IMAGE ########################## |
|
|
|
{% if "alpine" in target_file %} |
|
|
|
{% if "musl" in build_stage_base_image %} |
|
|
|
# Musl build image for statically compiled binary |
|
|
|
FROM clux/muslrust:nightly-2019-12-19 as build |
|
|
|
{% else %} |
|
|
|
# We need to use the Rust build image, because |
|
|
|
# we need the Rust compiler and Cargo tooling |
|
|
|
FROM rust:1.40 as build |
|
|
|
{% endif %} |
|
|
|
FROM {{ build_stage_base_image }} as build |
|
|
|
|
|
|
|
{% if "sqlite" in target_file %} |
|
|
|
# set sqlite as default for DB ARG for backward compatibility |
|
|
|
@ -199,12 +202,12 @@ RUN cargo build --features ${DB} --release --target=aarch64-unknown-linux-gnu |
|
|
|
######################## RUNTIME IMAGE ######################## |
|
|
|
# Create a new stage with a minimal image |
|
|
|
# because we already have a binary built |
|
|
|
FROM {{ preferred_base_image }} |
|
|
|
FROM {{ runtime_stage_base_image }} |
|
|
|
|
|
|
|
ENV ROCKET_ENV "staging" |
|
|
|
ENV ROCKET_PORT=80 |
|
|
|
ENV ROCKET_WORKERS=10 |
|
|
|
{% if "alpine" in target_file %} |
|
|
|
{% if "alpine" in runtime_stage_base_image %} |
|
|
|
ENV SSL_CERT_DIR=/etc/ssl/certs |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
@ -213,17 +216,17 @@ RUN [ "cross-build-start" ] |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
# Install needed libraries |
|
|
|
{% if "alpine" in target_file %} |
|
|
|
{% if "alpine" in runtime_stage_base_image %} |
|
|
|
RUN apk add --no-cache \ |
|
|
|
openssl \ |
|
|
|
curl \ |
|
|
|
{% if "sqlite" in target_file %} |
|
|
|
{% if "sqlite" in target_file %} |
|
|
|
sqlite \ |
|
|
|
{% elif "mysql" in target_file %} |
|
|
|
{% elif "mysql" in target_file %} |
|
|
|
mariadb-connector-c \ |
|
|
|
{% elif "postgresql" in target_file %} |
|
|
|
{% elif "postgresql" in target_file %} |
|
|
|
postgresql-libs \ |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
ca-certificates |
|
|
|
{% else %} |
|
|
|
RUN apt-get update && apt-get install -y \ |
|
|
|
@ -231,13 +234,13 @@ RUN apt-get update && apt-get install -y \ |
|
|
|
openssl \ |
|
|
|
ca-certificates \ |
|
|
|
curl \ |
|
|
|
{% if "sqlite" in target_file %} |
|
|
|
{% if "sqlite" in target_file %} |
|
|
|
sqlite3 \ |
|
|
|
{% elif "mysql" in target_file %} |
|
|
|
{% elif "mysql" in target_file %} |
|
|
|
libmariadbclient-dev \ |
|
|
|
{% elif "postgresql" in target_file %} |
|
|
|
{% elif "postgresql" in target_file %} |
|
|
|
libpq5 \ |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
&& rm -rf /var/lib/apt/lists/* |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
Robin Schneider
5 years ago