53 lines
1.3 KiB
Docker
53 lines
1.3 KiB
Docker
FROM docker.io/library/rust:1-bookworm as builder
|
|
RUN apt-get update \
|
|
&& apt-get install -y cmake protobuf-compiler \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
RUN USER=root cargo install cargo-auditable
|
|
RUN USER=root cargo new --bin nostr-rs-relay
|
|
WORKDIR ./nostr-rs-relay
|
|
COPY ./Cargo.toml ./Cargo.toml
|
|
COPY ./Cargo.lock ./Cargo.lock
|
|
# build dependencies only (caching)
|
|
RUN cargo auditable build --release --locked
|
|
# get rid of starter project code
|
|
RUN rm src/*.rs
|
|
|
|
# copy project source code
|
|
COPY ./src ./src
|
|
COPY ./proto ./proto
|
|
COPY ./build.rs ./build.rs
|
|
|
|
# build auditable release using locked deps
|
|
RUN rm ./target/release/deps/nostr*relay*
|
|
RUN cargo auditable build --release --locked
|
|
|
|
FROM docker.io/library/debian:bookworm-slim
|
|
|
|
ARG APP=/usr/src/app
|
|
ARG APP_DATA=/usr/src/app/db
|
|
RUN apt-get update \
|
|
&& apt-get install -y ca-certificates tzdata sqlite3 libc6 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
EXPOSE 8080
|
|
|
|
ENV TZ=Etc/UTC \
|
|
APP_USER=appuser
|
|
|
|
RUN groupadd $APP_USER \
|
|
&& useradd -g $APP_USER $APP_USER \
|
|
&& mkdir -p ${APP} \
|
|
&& mkdir -p ${APP_DATA}
|
|
|
|
COPY --from=builder /nostr-rs-relay/target/release/nostr-rs-relay ${APP}/nostr-rs-relay
|
|
|
|
RUN chown -R $APP_USER:$APP_USER ${APP}
|
|
|
|
USER $APP_USER
|
|
WORKDIR ${APP}
|
|
|
|
ENV RUST_LOG=info,nostr_rs_relay=info
|
|
ENV APP_DATA=${APP_DATA}
|
|
|
|
CMD ./nostr-rs-relay --db ${APP_DATA}
|