mirror of
https://github.com/iv-org/invidious.git
synced 2025-11-03 05:38:30 -06:00
40fb17791e
Commit the whole ./lib/ folder which stores the Crystal dependencies. This has a few benefits: - Allows to build the project without a connection to the Internet to retrieve dependencies. - Makes the project resistant against dependency re-tags which might include malicious code.
30 lines
1.0 KiB
Docker
30 lines
1.0 KiB
Docker
FROM alpine:edge AS builder
|
||
RUN apk add -u crystal shards libc-dev \
|
||
yaml-dev libxml2-dev sqlite-dev sqlite-static zlib-dev openssl-dev
|
||
WORKDIR /invidious
|
||
COPY ./shard.yml ./shard.yml
|
||
COPY ./shard.lock ./shard.lock
|
||
COPY ./lib/ ./lib/
|
||
COPY ./src/ ./src/
|
||
# TODO: .git folder is required for building – this is destructive.
|
||
# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
|
||
COPY ./.git/ ./.git/
|
||
RUN crystal build --static --release \
|
||
# TODO: Remove next line, see https://github.com/crystal-lang/crystal/issues/7946
|
||
-Dmusl \
|
||
./src/invidious.cr
|
||
|
||
FROM alpine:latest
|
||
RUN apk add -u imagemagick ttf-opensans
|
||
WORKDIR /invidious
|
||
RUN addgroup -g 1000 -S invidious && \
|
||
adduser -u 1000 -S invidious -G invidious
|
||
COPY ./assets/ ./assets/
|
||
COPY ./config/config.yml ./config/config.yml
|
||
COPY ./config/sql/ ./config/sql/
|
||
COPY ./locales/ ./locales/
|
||
RUN sed -i 's/host: localhost/host: postgres/' config/config.yml
|
||
COPY --from=builder /invidious/invidious .
|
||
USER invidious
|
||
CMD [ "/invidious/invidious" ]
|