blob: 0faffb8eaf5f3d47ebbd04b5c06d44eabfa897e0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
# syntax=docker/dockerfile:1
FROM rust:alpine AS builder
RUN apk add --no-cache musl-dev
WORKDIR /app
COPY . ./
RUN cargo build --release --target x86_64-unknown-linux-musl
RUN strip /app/target/x86_64-unknown-linux-musl/release/authzd
FROM gcr.io/distroless/static-debian12:nonroot
EXPOSE 50051
WORKDIR /var/www
COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/authzd /bin/authzd
COPY --from=builder /app/policies /etc/authzd/policies
ENTRYPOINT ["/bin/authzd"]
|
