mirror of
https://github.com/hanzoai/compute.git
synced 2026-10-30 14:50:41 +00:00
zooqueen
da67116468
The previous change (#12) deleted docker-entrypoint.sh and NOTHING ELSE: the Dockerfile edit was never staged, because `git add -A Dockerfile docker-entrypoint.sh` aborted on the second path — the file had already been removed by `git rm` — and I pushed without reading the staged diff. That left main strictly worse than before: ALLINONE still present, still last, still the default build target, and now CMD-ing a script that no longer exists. This removes the stage and its guacd base for real. Verified by reading the staged diff: Dockerfile's last FROM is STANDARD.
58 lines
2.1 KiB
Docker
58 lines
2.1 KiB
Docker
FROM --platform=$BUILDPLATFORM ghcr.io/hanzoai/node:18.19.0-alpine AS FRONT
|
|
WORKDIR /web
|
|
# alpine node build toolchain for any node-gyp native deps in `yarn install`
|
|
RUN apk add --no-cache python3 make g++ libc6-compat
|
|
COPY ./web .
|
|
RUN yarn install --frozen-lockfile --network-timeout 1000000 && yarn run build
|
|
|
|
|
|
FROM --platform=$BUILDPLATFORM ghcr.io/hanzoai/golang:1.26-alpine AS BACK
|
|
# go.mod pins the toolchain. The golang base image sets GOTOOLCHAIN=local,
|
|
# which turns a `go` directive newer than the image into a hard build
|
|
# failure instead of a download.
|
|
ENV GOTOOLCHAIN=auto
|
|
# build.sh is #!/bin/bash and fetches private modules over git (GOPRIVATE direct)
|
|
RUN apk add --no-cache bash git
|
|
WORKDIR /go/src/hanzo-visor
|
|
COPY . .
|
|
|
|
# Per SCALE_STANDARD.md §2 — every Go production Dockerfile that
|
|
# emits JSON to a client builds with GOEXPERIMENT=jsonv2. Verified
|
|
# -12% time / -23% allocs on the edge POST roundtrip vs encoding/json
|
|
# v1 (json_bench_test.go in hanzoai/zip).
|
|
ARG GO_EXPERIMENT=jsonv2
|
|
ENV GOEXPERIMENT=${GO_EXPERIMENT}
|
|
|
|
# buildx sets TARGETOS/TARGETARCH per target platform; build.sh compiles to it.
|
|
# Each arch is built on its native runner (amd64=evo, arm64=spark), so this is a
|
|
# native compile per platform — no QEMU.
|
|
ARG TARGETOS TARGETARCH
|
|
|
|
RUN chmod +x ./build.sh
|
|
RUN --mount=type=secret,id=gh_token ./build.sh
|
|
|
|
|
|
FROM ghcr.io/hanzoai/alpine:3.22 AS STANDARD
|
|
LABEL MAINTAINER="https://hanzo.ai/"
|
|
ARG USER=hanzo-visor
|
|
|
|
RUN sed -i 's/https/http/' /etc/apk/repositories
|
|
RUN apk add --update sudo
|
|
RUN apk add curl
|
|
RUN apk add ca-certificates && update-ca-certificates
|
|
|
|
RUN adduser -D $USER -u 1000 \
|
|
&& echo "$USER ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/$USER \
|
|
&& chmod 0440 /etc/sudoers.d/$USER \
|
|
&& mkdir logs \
|
|
&& chown -R $USER:$USER logs
|
|
|
|
USER 1000
|
|
WORKDIR /
|
|
COPY --from=BACK --chown=$USER:$USER /go/src/hanzo-visor/visor ./visor
|
|
COPY --from=BACK --chown=$USER:$USER /go/src/hanzo-visor/data ./data
|
|
COPY --from=BACK --chown=$USER:$USER /go/src/hanzo-visor/conf/app.conf ./conf/app.conf
|
|
COPY --from=FRONT --chown=$USER:$USER /web/build ./web/build
|
|
|
|
ENTRYPOINT ["/visor"]
|