60 lines
2.6 KiB
Docker
60 lines
2.6 KiB
Docker
# Build the manager binary
|
|
FROM --platform=$BUILDPLATFORM golang:1.25.1 AS builder
|
|
|
|
WORKDIR /workspace
|
|
|
|
# Make it runnable on a distroless image/without libc
|
|
ENV CGO_ENABLED=0
|
|
# Copy the Go Modules manifests
|
|
COPY go.mod go.sum ./
|
|
|
|
# cache deps before building and copying source so that we don't need to re-download as much
|
|
# and so that source changes don't invalidate our downloaded layer.
|
|
#
|
|
# Also, we need to do this before setting TARGETPLATFORM/TARGETOS/TARGETARCH/TARGETVARIANT
|
|
# so that go mod cache is shared across platforms.
|
|
RUN go mod download
|
|
|
|
# Copy the go source
|
|
# COPY . .
|
|
|
|
# Usage:
|
|
# docker buildx build --tag repo/img:tag -f ./Dockerfile . --platform linux/amd64,linux/arm64,linux/arm/v7
|
|
#
|
|
# With the above commmand,
|
|
# TARGETOS can be "linux", TARGETARCH can be "amd64", "arm64", and "arm", TARGETVARIANT can be "v7".
|
|
|
|
ARG TARGETPLATFORM TARGETOS TARGETARCH TARGETVARIANT VERSION=dev COMMIT_SHA=dev
|
|
|
|
# We intentionally avoid `--mount=type=cache,mode=0777,target=/go/pkg/mod` in the `go mod download` and the `go build` runs
|
|
# to avoid https://github.com/moby/buildkit/issues/2334
|
|
# We can use docker layer cache so the build is fast enogh anyway
|
|
# We also use per-platform GOCACHE for the same reason.
|
|
ENV GOCACHE="/build/${TARGETPLATFORM}/root/.cache/go-build"
|
|
|
|
# Build
|
|
RUN --mount=target=. \
|
|
--mount=type=cache,mode=0777,target=${GOCACHE} \
|
|
export GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOARM=${TARGETVARIANT#v} && \
|
|
go build -trimpath -ldflags="-s -w -X 'github.com/actions/actions-runner-controller/build.Version=${VERSION}' -X 'github.com/actions/actions-runner-controller/build.CommitSHA=${COMMIT_SHA}'" -o /out/manager main.go && \
|
|
go build -trimpath -ldflags="-s -w -X 'github.com/actions/actions-runner-controller/build.Version=${VERSION}' -X 'github.com/actions/actions-runner-controller/build.CommitSHA=${COMMIT_SHA}'" -o /out/ghalistener ./cmd/ghalistener && \
|
|
go build -trimpath -ldflags="-s -w" -o /out/github-webhook-server ./cmd/githubwebhookserver && \
|
|
go build -trimpath -ldflags="-s -w" -o /out/actions-metrics-server ./cmd/actionsmetricsserver && \
|
|
go build -trimpath -ldflags="-s -w" -o /out/sleep ./cmd/sleep
|
|
|
|
# Use distroless as minimal base image to package the manager binary
|
|
# Refer to https://github.com/GoogleContainerTools/distroless for more details
|
|
FROM gcr.io/distroless/static:nonroot
|
|
|
|
WORKDIR /
|
|
|
|
COPY --from=builder /out/manager .
|
|
COPY --from=builder /out/github-webhook-server .
|
|
COPY --from=builder /out/actions-metrics-server .
|
|
COPY --from=builder /out/ghalistener .
|
|
COPY --from=builder /out/sleep .
|
|
|
|
USER 65532:65532
|
|
|
|
ENTRYPOINT ["/manager"]
|