51 lines
1.2 KiB
Docker
51 lines
1.2 KiB
Docker
# syntax=docker/dockerfile:1.6
|
||
|
||
# 构建阶段（支持 buildx 多架构）
|
||
FROM --platform=$BUILDPLATFORM golang:1.21-alpine AS builder
|
||
|
||
ARG TARGETOS
|
||
ARG TARGETARCH
|
||
|
||
WORKDIR /app
|
||
|
||
# 复制依赖文件（优先复制，利用 Docker 缓存）
|
||
COPY go.mod go.sum ./
|
||
RUN go mod download
|
||
|
||
# 仅复制必要的源代码目录
|
||
COPY cmd/ ./cmd/
|
||
COPY internal/ ./internal/
|
||
COPY pkg/ ./pkg/
|
||
|
||
# 编译 - 优化参数减小二进制大小和加快编译
|
||
RUN CGO_ENABLED=0 \
|
||
GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH:-$(go env GOARCH)} \
|
||
go build -ldflags="-s -w" -trimpath \
|
||
-o qd-sc-server cmd/server/main.go
|
||
|
||
# 运行阶段 - 使用最小化的 alpine
|
||
FROM alpine:3.19
|
||
|
||
# 安装必要的工具（ca-certificates 用于 HTTPS，wget 用于 healthcheck）
|
||
RUN apk --no-cache add ca-certificates tzdata wget && \
|
||
addgroup -g 1000 appuser && \
|
||
adduser -D -u 1000 -G appuser appuser && \
|
||
mkdir -p /app && \
|
||
chown -R appuser:appuser /app
|
||
|
||
WORKDIR /app
|
||
|
||
# 从构建阶段复制二进制文件
|
||
COPY --from=builder --chown=appuser:appuser /app/qd-sc-server .
|
||
|
||
# 切换到非 root 用户
|
||
USER appuser
|
||
|
||
# 暴露端口
|
||
EXPOSE 8080
|
||
|
||
# 运行
|
||
ENTRYPOINT ["./qd-sc-server"]
|
||
CMD ["-config", "/app/config.yaml"]
|
||
|