Jonas Zohren
4 years ago
committed by
Jonas Zohren
3 changed files with 130 additions and 124 deletions
@ -1,97 +1,52 @@
@@ -1,97 +1,52 @@
|
||||
# Using multistage build: |
||||
# https://docs.docker.com/develop/develop-images/multistage-build/ |
||||
# https://whitfin.io/speeding-up-rust-docker-builds/ |
||||
|
||||
|
||||
########################## BUILD IMAGE ########################## |
||||
# Alpine build image to build Conduit's statically compiled binary |
||||
FROM alpine:3.14 as builder |
||||
|
||||
# Install packages needed for building all crates |
||||
RUN apk add --no-cache \ |
||||
cargo \ |
||||
openssl-dev |
||||
|
||||
# Specifies if the local project is build or if Conduit gets build |
||||
# from the official git repository. Defaults to the git repo. |
||||
ARG LOCAL=false |
||||
# Specifies which revision/commit is build. Defaults to HEAD |
||||
ARG GIT_REF=origin/master |
||||
|
||||
# Copy project files from current folder |
||||
COPY . . |
||||
# Build it from the copied local files or from the official git repository |
||||
RUN if [[ $LOCAL == "true" ]]; then \ |
||||
mv ./docker/healthcheck.sh . ; \ |
||||
echo "Building from local source..." ; \ |
||||
cargo install --path . ; \ |
||||
else \ |
||||
echo "Building revision '${GIT_REF}' from online source..." ; \ |
||||
cargo install --git "https://gitlab.com/famedly/conduit.git" --rev ${GIT_REF} ; \ |
||||
echo "Loadings healthcheck script from online source..." ; \ |
||||
wget "https://gitlab.com/famedly/conduit/-/raw/${GIT_REF#origin/}/docker/healthcheck.sh" ; \ |
||||
fi |
||||
|
||||
########################## RUNTIME IMAGE ########################## |
||||
# Create new stage with a minimal image for the actual |
||||
# runtime image/container |
||||
# syntax=docker/dockerfile:1 |
||||
FROM rust:1.53-alpine as builder |
||||
WORKDIR /usr/src/conduit |
||||
|
||||
# == Build dependencies without our own code separately for caching == |
||||
# |
||||
# Need a fake main.rs since Cargo refuses to build anything otherwise. |
||||
# |
||||
# See https://github.com/rust-lang/cargo/issues/2644 for a Cargo feature |
||||
# request that would allow just dependencies to be compiled, presumably |
||||
# regardless of whether source files are available. |
||||
RUN mkdir src && echo 'fn main() {}' > src/main.rs |
||||
COPY Cargo.toml Cargo.lock ./ |
||||
RUN cargo build |
||||
# TODO: RUN cargo build --release |
||||
|
||||
# == Actual build == |
||||
RUN rm -r src |
||||
COPY src src |
||||
# main.rs has to have its timestamp updated for this to work correctly since |
||||
# otherwise the build with the fake main.rs from above is newer than the |
||||
# source files (COPY preserves timestamps). |
||||
RUN touch src/main.rs |
||||
|
||||
RUN cargo install --path . |
||||
# TODO: RUN cargo install --release --path . |
||||
|
||||
|
||||
# This build stage is going to be run later |
||||
FROM alpine:3.14 |
||||
|
||||
ARG CREATED |
||||
ARG VERSION |
||||
ARG GIT_REF=origin/master |
||||
|
||||
ENV CONDUIT_CONFIG="/srv/conduit/conduit.toml" |
||||
|
||||
# Labels according to https://github.com/opencontainers/image-spec/blob/master/annotations.md |
||||
# including a custom label specifying the build command |
||||
LABEL org.opencontainers.image.created=${CREATED} \ |
||||
org.opencontainers.image.authors="Conduit Contributors" \ |
||||
org.opencontainers.image.title="Conduit" \ |
||||
org.opencontainers.image.version=${VERSION} \ |
||||
org.opencontainers.image.vendor="Conduit Contributors" \ |
||||
org.opencontainers.image.description="A Matrix homeserver written in Rust" \ |
||||
org.opencontainers.image.url="https://conduit.rs/" \ |
||||
org.opencontainers.image.revision=${GIT_REF} \ |
||||
org.opencontainers.image.source="https://gitlab.com/famedly/conduit.git" \ |
||||
org.opencontainers.image.licenses="Apache-2.0" \ |
||||
org.opencontainers.image.documentation="" \ |
||||
org.opencontainers.image.ref.name="" \ |
||||
org.label-schema.docker.build="docker build . -t matrixconduit/matrix-conduit:latest --build-arg CREATED=$(date -u +'%Y-%m-%dT%H:%M:%SZ') --build-arg VERSION=$(grep -m1 -o '[0-9].[0-9].[0-9]' Cargo.toml)" \ |
||||
maintainer="Weasy666" |
||||
|
||||
# Standard port on which Conduit launches. You still need to map the port when using the docker command or docker-compose. |
||||
EXPOSE 6167 |
||||
|
||||
# Copy config files from context and the binary from |
||||
# the "builder" stage to the current stage into folder |
||||
# /srv/conduit and create data folder for database |
||||
RUN mkdir -p /srv/conduit/.local/share/conduit |
||||
COPY --from=builder /root/.cargo/bin/conduit /srv/conduit/ |
||||
COPY --from=builder ./healthcheck.sh /srv/conduit/ |
||||
|
||||
# Add www-data user and group with UID 82, as used by alpine |
||||
# https://git.alpinelinux.org/aports/tree/main/nginx/nginx.pre-install |
||||
RUN set -x ; \ |
||||
addgroup -Sg 82 www-data 2>/dev/null ; \ |
||||
adduser -S -D -H -h /srv/conduit -G www-data -g www-data www-data 2>/dev/null ; \ |
||||
addgroup www-data www-data 2>/dev/null && exit 0 ; exit 1 |
||||
|
||||
# Change ownership of Conduit files to www-data user and group |
||||
RUN chown -cR www-data:www-data /srv/conduit |
||||
|
||||
# Install packages needed to run Conduit |
||||
RUN apk add --no-cache \ |
||||
ca-certificates \ |
||||
curl \ |
||||
libgcc |
||||
|
||||
# Test if Conduit is still alive, uses the same endpoint as Element |
||||
HEALTHCHECK --start-period=5s --interval=60s CMD ./healthcheck.sh |
||||
# Prepare path for database and media files |
||||
RUN mkdir -p /srv/conduit/.local/share/conduit |
||||
|
||||
# TODO: Change ? or maybe leave it like that |
||||
RUN mkdir -p /srv/conduit/.local/share/conduit |
||||
COPY --from=builder /usr/local/cargo/bin/conduit /srv/conduit/ |
||||
|
||||
# TODO: Check if we don't want to just use ENVs for running condit in docker |
||||
ENV CONDUIT_CONFIG="/srv/conduit/conduit.toml" |
||||
|
||||
# TODO: not needed, but documents it? |
||||
EXPOSE 6167 |
||||
|
||||
# Set user to www-data |
||||
USER www-data |
||||
# Set container home directory |
||||
WORKDIR /srv/conduit |
||||
# Run Conduit |
||||
ENTRYPOINT [ "/srv/conduit/conduit" ] |
||||
Loading…
Reference in new issue