Merge branch 'rs' into 'main'

Re-write the authorization daemon in rust

See merge request gitlab-org/software-supply-chain-security/authorization/authzd!1

1 files changed, 10 insertions, 10 deletions

diff --git a/Dockerfile b/Dockerfile
index d4e2b99d..744b4f3d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,14 +1,14 @@
 # syntax=docker/dockerfile:1
-FROM golang:1.24.0 AS build
-ENV CGO_ENABLED=0
+FROM rust:alpine AS builder
+RUN apk add --no-cache musl-dev
 WORKDIR /app
 COPY . ./
-RUN go build -o authzd ./cmd/authzd/main.go && mv ./authzd /bin/authzd
+RUN cargo build --release --target x86_64-unknown-linux-musl
+RUN strip /app/target/x86_64-unknown-linux-musl/release/authzd
 
-
-FROM scratch
-ENV BIND_ADDR=":http"
-EXPOSE 80
-WORKDIR /var/www/
-COPY --from=build /bin/authzd /bin/authzd
-CMD ["/bin/authzd"]
+FROM gcr.io/distroless/static-debian12:nonroot
+EXPOSE 50051
+WORKDIR /var/www
+COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/authzd /bin/authzd
+COPY --from=builder /app/etc/authzd /etc/authzd
+ENTRYPOINT ["/bin/authzd"]