# Fetch UPX FROM alpine:latest AS upx WORKDIR / RUN apk update && apk add ca-certificates && \ arch=$(arch | sed s/aarch64/arm64/ | sed s/x86_64/amd64/) && echo "ARCHITECTURE=${arch}" && \ wget "https://github.com/upx/upx/releases/download/v4.2.4/upx-4.2.4-${arch}_linux.tar.xz" && \ tar -xf upx-4.2.4-${arch}_linux.tar.xz && \ cd upx-4.2.4-${arch}_linux && \ mv upx /bin/upx # Build openfsd FROM golang:1.23.2-bookworm AS build WORKDIR /go/src/openfsd # Add the sources COPY . . # Download modules RUN go mod download # Compile RUN mkdir -p build && CGO_ENABLED=0 GOOS=linux go build -v -o build/openfsd -ldflags "-s -w" main.go # Move UPX into /bin COPY --from=upx /bin/upx /bin/upx # Compress with upx RUN upx -v -9 build/openfsd # Final distroless image FROM gcr.io/distroless/static-debian12 USER nonroot:nonroot WORKDIR /app COPY --from=build --chown=nonroot:nonroot /go/src/openfsd/build /app ENTRYPOINT ["/app/openfsd"]