diff options
| -rw-r--r-- | .dockerignore | 10 | ||||
| -rw-r--r-- | Dockerfile | 13 |
2 files changed, 17 insertions, 6 deletions
diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 00000000..e8da7cb4 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,10 @@ +target/ +.git/ +.gitignore +*.md +tests/ +.env* +Dockerfile* +.dockerignore +tags +mise.toml @@ -1,13 +1,14 @@ # syntax=docker/dockerfile:1 -FROM rust:latest AS builder +FROM rust:alpine AS builder +RUN apk add --no-cache musl-dev WORKDIR /app -RUN apt-get update && apt-get install -y musl-tools musl-dev -RUN rustup target add x86_64-unknown-linux-musl COPY . ./ RUN cargo build --release --target x86_64-unknown-linux-musl +RUN strip /app/target/x86_64-unknown-linux-musl/release/authzd -FROM scratch +FROM gcr.io/distroless/static-debian12:nonroot EXPOSE 50051 -WORKDIR /var/www/ +WORKDIR /var/www COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/authzd /bin/authzd -CMD ["/bin/authzd"] +COPY --from=builder /app/policies /etc/authzd/policies +ENTRYPOINT ["/bin/authzd"] |