mirror of
https://github.com/stalwartlabs/stalwart.git
synced 2026-08-18 16:01:11 +00:00
Maurus Decimus
81 lines
3.3 KiB
Docker
81 lines
3.3 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
FROM debian:trixie-slim AS chef
|
|
ARG TARGETARCH
|
|
ARG FDB_VERSION_RANGE="7.4"
|
|
RUN apt-get update && \
|
|
export DEBIAN_FRONTEND=noninteractive && \
|
|
apt-get install -yq --no-install-recommends \
|
|
build-essential \
|
|
ca-certificates \
|
|
cmake \
|
|
clang \
|
|
curl \
|
|
jq \
|
|
protobuf-compiler
|
|
ENV RUSTUP_HOME=/opt/rust/rustup \
|
|
PATH=/home/root/.cargo/bin:/opt/rust/cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
RUN curl https://sh.rustup.rs -sSf | \
|
|
env CARGO_HOME=/opt/rust/cargo \
|
|
sh -s -- -y --default-toolchain stable --profile minimal --no-modify-path && \
|
|
env CARGO_HOME=/opt/rust/cargo \
|
|
rustup component add rustfmt
|
|
RUN \
|
|
ARCH="${TARGETARCH:-$(dpkg --print-architecture)}" && \
|
|
case "$ARCH" in \
|
|
amd64) FDB_ARCH=amd64 ;; \
|
|
arm64) FDB_ARCH=aarch64 ;; \
|
|
*) echo "Unsupported architecture: $ARCH" >&2; exit 1 ;; \
|
|
esac && \
|
|
curl --retry 5 -fLso fdb-client.deb "$(curl --retry 5 -fLs 'https://api.github.com/repos/apple/foundationdb/releases?per_page=100' | jq --arg FDB_ARCH "$FDB_ARCH" --arg RANGE "${FDB_VERSION_RANGE}" -r '[.[] | select(.tag_name | startswith($RANGE + "."))] | sort_by(.tag_name | split(".") | map(tonumber)) | reverse | .[0].assets[] | select(.name | test("foundationdb-clients.*" + $FDB_ARCH + ".deb$")) | .browser_download_url')" && \
|
|
mkdir -p /fdb && \
|
|
dpkg -x fdb-client.deb /fdb && \
|
|
mv /fdb/usr/include/foundationdb /usr/include && \
|
|
mv /fdb/usr/lib/libfdb_c.so /usr/lib && \
|
|
rm -rf fdb-client.deb /fdb
|
|
RUN env CARGO_HOME=/opt/rust/cargo cargo install cargo-chef && \
|
|
rm -rf /opt/rust/cargo/registry/
|
|
WORKDIR /app
|
|
|
|
FROM chef AS planner
|
|
COPY Cargo.toml .
|
|
COPY Cargo.lock .
|
|
COPY crates/ crates/
|
|
COPY resources/ resources/
|
|
COPY tests/ tests/
|
|
RUN cargo chef prepare --recipe-path recipe.json
|
|
|
|
FROM chef AS builder
|
|
COPY --from=planner /app/recipe.json recipe.json
|
|
RUN cargo chef cook --release --recipe-path recipe.json
|
|
COPY Cargo.toml .
|
|
COPY Cargo.lock .
|
|
COPY crates/ crates/
|
|
COPY resources/ resources/
|
|
COPY tests/ tests/
|
|
RUN cargo build -p stalwart --no-default-features --features "foundationdb s3 redis azure nats enterprise" --release
|
|
|
|
FROM debian:trixie-slim AS runtime
|
|
|
|
COPY --from=builder --chmod=0755 /app/target/release/stalwart /usr/local/bin/stalwart
|
|
COPY --from=builder /usr/lib/libfdb_c.so /usr/lib/libfdb_c.so
|
|
RUN export DEBIAN_FRONTEND=noninteractive && \
|
|
apt-get update && \
|
|
apt-get install -yq --no-install-recommends ca-certificates curl libcap2-bin && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
groupadd -r -g 2000 stalwart && \
|
|
useradd -r -u 2000 -g 2000 -s /usr/sbin/nologin -M stalwart && \
|
|
mkdir -p /etc/stalwart /var/lib/stalwart && \
|
|
chown stalwart:stalwart /etc/stalwart /var/lib/stalwart && \
|
|
setcap 'cap_net_bind_service=+ep' /usr/local/bin/stalwart
|
|
|
|
USER stalwart
|
|
WORKDIR /var/lib/stalwart
|
|
VOLUME ["/etc/stalwart", "/var/lib/stalwart"]
|
|
EXPOSE 443 25 110 587 465 143 993 995 4190 8080
|
|
ENV STALWART_HEALTHCHECK_URL=https://127.0.0.1:443/healthz/live
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
|
|
CMD curl -fsSk -H "X-Forwarded-For: 127.0.0.1" "$STALWART_HEALTHCHECK_URL" || curl -fsS -H "X-Forwarded-For: 127.0.0.1" http://127.0.0.1:8080/healthz/live || exit 1
|
|
ENTRYPOINT ["/usr/local/bin/stalwart"]
|
|
CMD ["--config", "/etc/stalwart/config.json"]
|