Deuxfleurs/tricot
16
3
Fork 4
Code Issues 4 Pull requests 2 Projects Releases Wiki Activity

optimised Dockerfile in a alpine image #18

Open
fredix wants to merge 1 commit from fredix/tricot:main into main
pull from: fredix/tricot:main
merge into: Deuxfleurs:main
Conversation 1 Commits 1 Files changed 1 +19 -14
1 changed files with 19 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit ea6287ad39 - Show all commits

33
Dockerfile
View file

@ -1,23 +1,28 @@
FROM rust:1.68-buster as builder
RUN apt-get update && \
apt-get install -y libssl-dev pkg-config
FROM rust:alpine AS builder
RUN apk add --no-cache openssl-dev musl-dev
RUN rustup target add x86_64-unknown-linux-musl
WORKDIR /srv
# Build dependencies and cache them
COPY Cargo.* ./
RUN mkdir -p src && \
echo "fn main() {println!(\"if you see this, the build broke\")}" > src/main.rs && \
cargo build --release && \
rm -r src && \
rm target/release/deps/tricot*
# Build final app
COPY ./src ./src
RUN cargo build --release
RUN RUSTFLAGS=-Ctarget-feature=-crt-static \
cargo build \
--release \
--target=x86_64-unknown-linux-musl
FROM debian:bullseye-slim
RUN apt-get update && apt-get install -y libssl1.1 iptables ca-certificates
COPY --from=builder /srv/target/release/tricot /usr/local/sbin/tricot
CMD ["/usr/local/sbin/tricot"]
RUN objcopy \
--compress-debug-sections \
target/x86_64-unknown-linux-musl/release/tricot \
target/x86_64-unknown-linux-musl/release/tricot.compressed
FROM alpine
RUN apk add -U --no-cache ca-certificates libgcc
Armael commented 2024-12-05 12:21:19 +00:00
Review
Copy link

Is libgcc needed since this is a static musl build?

Is `libgcc` needed since this is a static musl build?
fredix commented 2024-12-05 17:41:40 +00:00
Review
Copy link

exactly ! And I had to build a static binary because of openssl lib (rust failed to link to ssl lib, I don't know why, I'm not a rust developer :/ )
Anyway if you give me a link to your public docker image I could use it instead of mine ?

exactly ! And I had to build a static binary because of openssl lib (rust failed to link to ssl lib, I don't know why, I'm not a rust developer :/ ) Anyway if you give me a link to your public docker image I could use it instead of mine ?
COPY --from=builder \
/srv/target/x86_64-unknown-linux-musl/release/tricot.compressed \
/usr/local/bin/tricot
CMD ["/usr/local/bin/tricot"]