blsmedia/bot
2
0
Fork 0
Code Activity

improve Dockerfile size and safety

Browse Source
This commit is contained in:
TheDen
2022-07-07 19:17:50 +10:00
committed by Baptiste Arnaud
parent 50ab2a9b9c
commit 9839f5c132
1 changed files with 15 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
Dockerfile
View File

@ -7,7 +7,7 @@ ENV SCOPE=${SCOPE}
FROM base AS pruner
RUN yarn global add turbo@1.2.9
COPY . .
RUN turbo prune --scope=${SCOPE} --docker
RUN turbo prune --scope="${SCOPE}" --docker
FROM base AS installer
COPY --from=pruner /app/out/json/ .
@ -15,12 +15,13 @@ COPY --from=pruner /app/out/yarn.lock ./yarn.lock
RUN yarn install --frozen-lockfile
FROM base AS builder
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
COPY --from=installer /app/ .
COPY --from=pruner /app/out/full/ .
COPY ./apps/${SCOPE}/.env.docker ./apps/${SCOPE}/.env.production
COPY ./apps/${SCOPE}/.env.docker ./apps/${SCOPE}/.env.local
RUN apt-get -qy update && apt-get -qy install openssl
RUN yarn turbo run build --scope=${SCOPE} --include-dependencies --no-deps
RUN apt-get -qy update && apt-get -qy --no-install-recommends install openssl
RUN yarn turbo run build --scope="${SCOPE}" --include-dependencies --no-deps
RUN find . -name node_modules | xargs rm -rf
FROM base AS runner
@ -34,13 +35,17 @@ COPY --from=builder /app/apps/${SCOPE}/package.json ./package.json
COPY --from=builder /app/apps/${SCOPE}/.next/standalone ./
COPY --from=builder /app/apps/${SCOPE}/.next/static ./.next/static
COPY --from=builder /app/apps/${SCOPE}/.env.docker ./.env.production
RUN apt-get -qy update && apt-get -qy install openssl
RUN apt-get -qy update \
&& apt-get -qy --no-install-recommends install \
openssl \
&& apt-get autoremove -yq \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/*
COPY env.sh ./
COPY ${SCOPE}-entrypoint.sh ./
RUN chmod +x ./${SCOPE}-entrypoint.sh
RUN chmod +x ./env.sh
ENTRYPOINT ./${SCOPE}-entrypoint.sh
COPY env.sh ${SCOPE}-entrypoint.sh ./
RUN chmod +x ./"${SCOPE}"-entrypoint.sh \
&& chmod +x ./env.sh
ENTRYPOINT ./"${SCOPE}"-entrypoint.sh
EXPOSE 3000
ENV PORT 3000
ENV PORT 3000