curben
/
cloudflared-mirror
mirror of https://github.com/cloudflare/cloudflared.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
cloudflared-mirror/Dockerfile

38 lines
1.0 KiB
Docker
Raw Normal View History

refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# use a builder image for building cloudflare
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
2020-05-29 01:06:27 +00:00
ARG TARGET_GOOS
ARG TARGET_GOARCH
TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1 update docker files with go1.22.5 update windows scripts with go1.22.5
2024-07-22 08:30:04 +00:00
FROM golang:1.22.5 as builder
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
2020-05-29 01:06:27 +00:00
ENV GO111MODULE=on \
TUN-8829: add CONTAINER_BUILD to dockerfiles Closes TUN-8829
2024-12-20 16:24:12 +00:00
CGO_ENABLED=0 \
TARGET_GOOS=${TARGET_GOOS} \
TARGET_GOARCH=${TARGET_GOARCH} \
# the CONTAINER_BUILD envvar is used set github.com/cloudflare/cloudflared/metrics.Runtime=virtual
# which changes how cloudflared binds the metrics server
CONTAINER_BUILD=1
TUN-8737: update metrics server port selection ## Summary Update how metrics server binds to a listener by using a known set of ports whenever the default address is used with the fallback to a random port in case all address are already in use. The default address changes at compile time in order to bind to a different default address when the final deliverable is a docker image. Refactor ReadyServer tests. Closes TUN-8737
2024-11-22 15:23:46 +00:00
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 10:34:40 +00:00
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
WORKDIR /go/src/github.com/cloudflare/cloudflared/
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# copy our sources into the builder image
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
COPY . .
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 10:34:40 +00:00
RUN .teamcity/install-cloudflare-go.sh
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# compile cloudflared
TUN-8130: Install go tool chain in /tmp on build agents
2024-01-09 21:55:45 +00:00
RUN PATH="/tmp/go/bin:$PATH" make cloudflared
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# use a distroless base image with glibc
TUN-6652: Publish dockerfile for both amd64 and arm64 This change seeks to push an arm64 built image to dockerhub for arm users to run. This should spin cloudflared on arm machines without the warning WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
2022-08-12 15:01:32 +00:00
FROM gcr.io/distroless/base-debian11:nonroot
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
Label correct container Previous PR added label to the build container, not the final container.
2022-08-18 05:08:01 +00:00
LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared"
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# copy our compiled binary
COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/
# run as non-privileged user
USER nonroot
# command / entrypoint of container
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
ENTRYPOINT ["cloudflared", "--no-autoupdate"]
CMD ["version"]