cloudflared-mirror/Dockerfile

# use a builder image for building cloudflare
ARG TARGET_GOOS
ARG TARGET_GOARCH
FROM golang:1.22.2 as builder
ENV GO111MODULE=on \
    CGO_ENABLED=0 \
    TARGET_GOOS=${TARGET_GOOS} \
    TARGET_GOARCH=${TARGET_GOARCH}

WORKDIR /go/src/github.com/cloudflare/cloudflared/

# copy our sources into the builder image
COPY . .

RUN .teamcity/install-cloudflare-go.sh

# compile cloudflared
RUN PATH="/tmp/go/bin:$PATH" make cloudflared

# use a distroless base image with glibc
FROM gcr.io/distroless/base-debian11:nonroot

LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared"

# copy our compiled binary
COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/

# run as non-privileged user
USER nonroot

# set health-check
HEALTHCHECK &{["CMD-SHELL" "curl --fail http://127.0.0.1:80/ || exit 1"] "1m0s" "40s" "0s" '\n'}

# command / entrypoint of container
ENTRYPOINT ["cloudflared", "--no-autoupdate"]
CMD ["version"]
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00			`# use a builder image for building cloudflare`
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> 2020-05-29 01:06:27 +00:00			`ARG TARGET_GOOS`
			`ARG TARGET_GOARCH`
TUN-8407: Upgrade go to version 1.22.2 2024-05-07 10:19:58 +00:00			`FROM golang:1.22.2 as builder`
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> 2020-05-29 01:06:27 +00:00			`ENV GO111MODULE=on \`
			`CGO_ENABLED=0 \`
			`TARGET_GOOS=${TARGET_GOOS} \`
			`TARGET_GOARCH=${TARGET_GOARCH}`
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED 2024-01-08 10:34:40 +00:00
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker. 2019-04-29 21:25:34 +00:00			`WORKDIR /go/src/github.com/cloudflare/cloudflared/`
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00
			`# copy our sources into the builder image`
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker. 2019-04-29 21:25:34 +00:00			`COPY . .`
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED 2024-01-08 10:34:40 +00:00			`RUN .teamcity/install-cloudflare-go.sh`

refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00			`# compile cloudflared`
TUN-8130: Install go tool chain in /tmp on build agents 2024-01-09 21:55:45 +00:00			`RUN PATH="/tmp/go/bin:$PATH" make cloudflared`
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker. 2019-04-29 21:25:34 +00:00
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00			`# use a distroless base image with glibc`
TUN-6652: Publish dockerfile for both amd64 and arm64 This change seeks to push an arm64 built image to dockerhub for arm users to run. This should spin cloudflared on arm machines without the warning WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested 2022-08-12 15:01:32 +00:00			`FROM gcr.io/distroless/base-debian11:nonroot`
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00
Label correct container Previous PR added label to the build container, not the final container. 2022-08-18 05:08:01 +00:00			`LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared"`

refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00			`# copy our compiled binary`
			`COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/`

			`# run as non-privileged user`
			`USER nonroot`

added healthcheck 2024-06-08 14:18:52 +00:00			`# set health-check`
			`HEALTHCHECK &{["CMD-SHELL" "curl --fail http://127.0.0.1:80/ \|\| exit 1"] "1m0s" "40s" "0s" '\n'}`

refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless 2019-12-17 01:25:17 +00:00			`# command / entrypoint of container`
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker. 2019-04-29 21:25:34 +00:00			`ENTRYPOINT ["cloudflared", "--no-autoupdate"]`
			`CMD ["version"]`