| FROM rust:latest AS chef | |
| # We only pay the installation cost once, | |
| # it will be cached from the second build onwards | |
| RUN cargo install cargo-chef --locked | |
| WORKDIR /app | |
| FROM chef AS planner | |
| COPY . . | |
| RUN cargo chef prepare --recipe-path recipe.json | |
| FROM chef AS builder | |
| COPY --from=planner /app/recipe.json recipe.json | |
| # Build dependencies - this is the caching Docker layer! | |
| RUN cargo chef cook --release --recipe-path recipe.json | |
| # Build application | |
| COPY . . | |
| RUN cargo install --path . | |
| # We do not need the Rust toolchain to run the binary! | |
| FROM gcr.io/distroless/cc-debian12 | |
| COPY --from=builder /app/public/ /opt/websurfx/public/ | |
| COPY --from=builder /app/websurfx/config.lua /etc/xdg/websurfx/config.lua | |
| COPY --from=builder /app/websurfx/allowlist.txt /etc/xdg/websurfx/allowlist.txt | |
| COPY --from=builder /app/websurfx/blocklist.txt /etc/xdg/websurfx/blocklist.txt | |
| COPY --from=builder /usr/local/cargo/bin/* /usr/local/bin/ | |
| CMD ["websurfx"] | |