|
FROM rust:latest AS chef |
|
# We only pay the installation cost once, |
|
# it will be cached from the second build onwards |
|
RUN cargo install cargo-chef --locked |
|
|
|
WORKDIR /app |
|
|
|
FROM chef AS planner |
|
COPY . . |
|
RUN cargo chef prepare --recipe-path recipe.json |
|
|
|
FROM chef AS builder |
|
COPY --from=planner /app/recipe.json recipe.json |
|
# Build dependencies - this is the caching Docker layer! |
|
RUN cargo chef cook --release --recipe-path recipe.json |
|
|
|
# Build application |
|
COPY . . |
|
RUN cargo install --path . |
|
|
|
# We do not need the Rust toolchain to run the binary! |
|
FROM gcr.io/distroless/cc-debian12 |
|
COPY --from=builder /app/public/ /opt/websurfx/public/ |
|
COPY --from=builder /app/websurfx/config.lua /etc/xdg/websurfx/config.lua |
|
COPY --from=builder /app/websurfx/allowlist.txt /etc/xdg/websurfx/allowlist.txt |
|
COPY --from=builder /app/websurfx/blocklist.txt /etc/xdg/websurfx/blocklist.txt |
|
COPY --from=builder /usr/local/cargo/bin |
|
CMD ["websurfx"] |
|
|
