56 lines
2.5 KiB
Docker
56 lines
2.5 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS dependencies-base
|
|
WORKDIR /app
|
|
RUN apk add --no-cache python3 make g++
|
|
COPY package.json package-lock.json ./
|
|
# Keep the image build on the same npm major that produces and validates the
|
|
# nested dependency overrides in package-lock.json. Node 22's bundled npm is
|
|
# older and rejects this otherwise valid lockfile during `npm ci`.
|
|
RUN npm install --global npm@11.16.0
|
|
|
|
FROM dependencies-base AS build
|
|
ARG DOCKDECK_BUILD_VERSION=0.1.0
|
|
ARG DOCKDECK_BUILD_REVISION=development
|
|
ARG DOCKDECK_BUILD_DATE=1970-01-01T00:00:00.000Z
|
|
RUN npm ci
|
|
COPY . .
|
|
RUN DOCKDECK_BUILD_VERSION="$DOCKDECK_BUILD_VERSION" \
|
|
DOCKDECK_BUILD_REVISION="$DOCKDECK_BUILD_REVISION" \
|
|
DOCKDECK_BUILD_DATE="$DOCKDECK_BUILD_DATE" \
|
|
npm run build
|
|
|
|
# Installing the production dependency graph from the lockfile avoids mutating
|
|
# a full dependency tree with `npm prune`. Concurrent BuildKit validations had
|
|
# both stalled in that prune operation, while this stage remains reproducible.
|
|
FROM dependencies-base AS production-dependencies
|
|
RUN npm ci --omit=dev
|
|
|
|
FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS runtime
|
|
ARG DOCKDECK_BUILD_VERSION=0.1.0
|
|
ARG DOCKDECK_BUILD_REVISION=development
|
|
ARG DOCKDECK_BUILD_DATE=1970-01-01T00:00:00.000Z
|
|
ARG DOCKDECK_BUILD_SOURCE=jens/dockdeck
|
|
LABEL org.opencontainers.image.version="$DOCKDECK_BUILD_VERSION" \
|
|
org.opencontainers.image.revision="$DOCKDECK_BUILD_REVISION" \
|
|
org.opencontainers.image.created="$DOCKDECK_BUILD_DATE" \
|
|
org.opencontainers.image.source="$DOCKDECK_BUILD_SOURCE"
|
|
ENV NODE_ENV=production \
|
|
HOST=0.0.0.0 \
|
|
PORT=3000 \
|
|
DATABASE_PATH=/data/dockdeck.db
|
|
WORKDIR /app
|
|
RUN apk add --no-cache su-exec && \
|
|
addgroup -S dockdeck && \
|
|
adduser -S -G dockdeck dockdeck && \
|
|
mkdir -p /data /host-proc /unraid-icons-cache && \
|
|
chown dockdeck:dockdeck /data /unraid-icons-cache
|
|
COPY --from=build --chown=dockdeck:dockdeck /app/package.json ./package.json
|
|
COPY --from=production-dependencies --chown=dockdeck:dockdeck /app/node_modules ./node_modules
|
|
COPY --from=build --chown=dockdeck:dockdeck /app/dist ./dist
|
|
COPY docker-entrypoint.sh /usr/local/bin/dockdeck-entrypoint
|
|
RUN chmod 0755 /usr/local/bin/dockdeck-entrypoint
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 CMD wget -qO- http://127.0.0.1:3000/api/health >/dev/null || exit 1
|
|
ENTRYPOINT ["dockdeck-entrypoint"]
|
|
CMD ["node", "dist/server/index.js"]
|