curben
/
cloudflared-mirror
mirror of https://github.com/cloudflare/cloudflared.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
cloudflared-mirror/Dockerfile

32 lines
815 B
Docker
Raw Normal View History

refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# use a builder image for building cloudflare
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
2020-05-29 01:06:27 +00:00
ARG TARGET_GOOS
ARG TARGET_GOARCH
TUN-6652: Publish dockerfile for both amd64 and arm64 This change seeks to push an arm64 built image to dockerhub for arm users to run. This should spin cloudflared on arm machines without the warning WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
2022-08-12 15:01:32 +00:00
FROM golang:1.19 as builder
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
2020-05-29 01:06:27 +00:00
ENV GO111MODULE=on \
CGO_ENABLED=0 \
TARGET_GOOS=${TARGET_GOOS} \
TARGET_GOARCH=${TARGET_GOARCH}
Add image source label to docker container. This label allows tools like [whitesource renovate](https://docs.renovatebot.com/modules/datasource/#docker-datasource) to find changelogs.
2022-05-31 17:29:51 +00:00
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
WORKDIR /go/src/github.com/cloudflare/cloudflared/
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# copy our sources into the builder image
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
COPY . .
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# compile cloudflared
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
RUN make cloudflared
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# use a distroless base image with glibc
TUN-6652: Publish dockerfile for both amd64 and arm64 This change seeks to push an arm64 built image to dockerhub for arm users to run. This should spin cloudflared on arm machines without the warning WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
2022-08-12 15:01:32 +00:00
FROM gcr.io/distroless/base-debian11:nonroot
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
Label correct container Previous PR added label to the build container, not the final container.
2022-08-18 05:08:01 +00:00
LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared"
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# copy our compiled binary
COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/
# run as non-privileged user
USER nonroot
# command / entrypoint of container
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
ENTRYPOINT ["cloudflared", "--no-autoupdate"]
CMD ["version"]