mirror of
https://github.com/renorris/openfsd
synced 2026-03-22 06:25:35 +08:00
40 lines
960 B
Docker
40 lines
960 B
Docker
# Fetch UPX
|
|
FROM alpine:latest AS upx
|
|
WORKDIR /
|
|
RUN apk update && apk add ca-certificates && \
|
|
arch=$(arch | sed s/aarch64/arm64/ | sed s/x86_64/amd64/) && echo "ARCHITECTURE=${arch}" && \
|
|
wget "https://github.com/upx/upx/releases/download/v4.2.4/upx-4.2.4-${arch}_linux.tar.xz" && \
|
|
tar -xf upx-4.2.4-${arch}_linux.tar.xz && \
|
|
cd upx-4.2.4-${arch}_linux && \
|
|
mv upx /bin/upx
|
|
|
|
# Build openfsd
|
|
FROM golang:1.23.2-bookworm AS build
|
|
|
|
WORKDIR /go/src/openfsd
|
|
|
|
# Add the sources
|
|
COPY . .
|
|
|
|
# Download modules
|
|
RUN go mod download
|
|
|
|
# Compile
|
|
RUN mkdir -p build && CGO_ENABLED=0 GOOS=linux go build -v -o build/openfsd -ldflags "-s -w" main.go
|
|
|
|
# Move UPX into /bin
|
|
COPY --from=upx /bin/upx /bin/upx
|
|
|
|
# Compress with upx
|
|
RUN upx -v -9 build/openfsd
|
|
|
|
# Final distroless image
|
|
FROM gcr.io/distroless/static-debian12
|
|
|
|
USER nonroot:nonroot
|
|
|
|
WORKDIR /app
|
|
COPY --from=build --chown=nonroot:nonroot /go/src/openfsd/build /app
|
|
|
|
ENTRYPOINT ["/app/openfsd"]
|