curben
/
cloudflared-mirror
mirror of https://github.com/cloudflare/cloudflared.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
cloudflared-mirror/Dockerfile

34 lines
915 B
Docker
Raw Normal View History

refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# use a builder image for building cloudflare
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
2020-05-29 01:06:27 +00:00
ARG TARGET_GOOS
ARG TARGET_GOARCH
TUN-8052: Update go to 1.21.5 Also update golang.org/x/net and google.golang.org/grpc to fix vulnerabilities, although cloudflared is using them in a way that is not exposed to those risks
2023-12-11 11:58:19 +00:00
FROM golang:1.21.5 as builder
Adding support for multi-architecture images and binaries (#184) * Allow Dockerfile --build-args to override GOOS and GOARCH defaults Allow Dockerfile --build-args to override GOOS and GOARCH defaults Support building multi architecture binaries remove default OS and ARCH to avoid tag confusion when compiling image through Makefile Tag image with corrosponding OS and ARCH build variables updating Makefile Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com> * remove duplicate import on windows_service.go Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
2020-05-29 01:06:27 +00:00
ENV GO111MODULE=on \
CGO_ENABLED=0 \
TARGET_GOOS=${TARGET_GOOS} \
TARGET_GOARCH=${TARGET_GOARCH}
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 10:34:40 +00:00
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
WORKDIR /go/src/github.com/cloudflare/cloudflared/
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# copy our sources into the builder image
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
COPY . .
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 10:34:40 +00:00
RUN .teamcity/install-cloudflare-go.sh
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# compile cloudflared
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 10:34:40 +00:00
RUN PATH="/go/src/github.com/cloudflare/cloudflared/go/bin:$PATH" make cloudflared
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# use a distroless base image with glibc
TUN-6652: Publish dockerfile for both amd64 and arm64 This change seeks to push an arm64 built image to dockerhub for arm users to run. This should spin cloudflared on arm machines without the warning WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
2022-08-12 15:01:32 +00:00
FROM gcr.io/distroless/base-debian11:nonroot
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
Label correct container Previous PR added label to the build container, not the final container.
2022-08-18 05:08:01 +00:00
LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared"
refactor(docker): optimize Dockerfile (#126) * refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
2019-12-17 01:25:17 +00:00
# copy our compiled binary
COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/
# run as non-privileged user
USER nonroot
# command / entrypoint of container
Build a docker container Use debian/distroless (glibc) as a base which in general gives slightly higher performance than alpine (musl) while trading off container size (about 10mb). The build phase makes the assumption that any capnproto-files are pre-processed before building in-docker.
2019-04-29 21:25:34 +00:00
ENTRYPOINT ["cloudflared", "--no-autoupdate"]
CMD ["version"]