mirror of
https://github.com/hanzoai/vault.git
synced 2026-10-30 18:18:35 +00:00
zeekayandHanzo Dev
a587c15d5b
Modules declare go 1.27.1 and the build images follow. go fix applied the modernizers; omitzero is not applied, since it changes what the JSON says. Co-authored-by: Hanzo Dev <[email protected]>
33 lines
825 B
Docker
33 lines
825 B
Docker
# syntax=docker/dockerfile:1
|
|
FROM --platform=$BUILDPLATFORM golang:1.27.1-alpine AS builder
|
|
|
|
ARG TARGETARCH
|
|
ARG TARGETOS=linux
|
|
|
|
WORKDIR /build
|
|
COPY go.mod ./
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
go mod download
|
|
COPY . .
|
|
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build \
|
|
-ldflags="-w -s" \
|
|
-o vault ./cmd/vault
|
|
|
|
FROM alpine:3.21
|
|
RUN apk add --no-cache ca-certificates tzdata
|
|
RUN addgroup -g 1000 vault && adduser -u 1000 -G vault -s /sbin/nologin -D vault
|
|
|
|
WORKDIR /app
|
|
COPY --from=builder --chown=vault:vault /build/vault .
|
|
|
|
USER vault
|
|
EXPOSE 8443
|
|
|
|
HEALTHCHECK --interval=10s --timeout=3s --start-period=5s \
|
|
CMD wget -qO- http://localhost:8443/health || exit 1
|
|
|
|
ENTRYPOINT ["./vault"]
|