diff --git a/.docker-images b/.docker-images index 28bf15aa..984a3183 100644 --- a/.docker-images +++ b/.docker-images @@ -1,6 +1,6 @@ images: - name: cloudflared - dockerfile: Dockerfile + dockerfile: Dockerfile.$ARCH context: . versions: - latest @@ -8,3 +8,6 @@ images: - name: docker.io/cloudflare user: env:DOCKER_USER password: env:DOCKER_PASSWORD + architectures: + - amd64 + - arm64 diff --git a/Dockerfile b/Dockerfile index f10076d9..8ca108e6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ # use a builder image for building cloudflare ARG TARGET_GOOS ARG TARGET_GOARCH -FROM golang:1.18.1 as builder +FROM golang:1.19 as builder ENV GO111MODULE=on \ CGO_ENABLED=0 \ TARGET_GOOS=${TARGET_GOOS} \ @@ -18,7 +18,7 @@ COPY . . RUN make cloudflared # use a distroless base image with glibc -FROM gcr.io/distroless/base-debian10:nonroot +FROM gcr.io/distroless/base-debian11:nonroot # copy our compiled binary COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/ diff --git a/Dockerfile.amd64 b/Dockerfile.amd64 new file mode 100644 index 00000000..cadfebfc --- /dev/null +++ b/Dockerfile.amd64 @@ -0,0 +1,27 @@ +# use a builder image for building cloudflare +FROM golang:1.19 as builder +ENV GO111MODULE=on \ + CGO_ENABLED=0 + +LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared" + +WORKDIR /go/src/github.com/cloudflare/cloudflared/ + +# copy our sources into the builder image +COPY . . + +# compile cloudflared +RUN GOOS=linux GOARCH=amd64 make cloudflared + +# use a distroless base image with glibc +FROM gcr.io/distroless/base-debian11:nonroot + +# copy our compiled binary +COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/ + +# run as non-privileged user +USER nonroot + +# command / entrypoint of container +ENTRYPOINT ["cloudflared", "--no-autoupdate"] +CMD ["version"] diff --git a/Dockerfile.arm64 b/Dockerfile.arm64 new file mode 100644 index 00000000..2bc6d982 --- /dev/null +++ b/Dockerfile.arm64 @@ -0,0 +1,27 @@ +# use a builder image for building cloudflare +FROM golang:1.19 as builder +ENV GO111MODULE=on \ + CGO_ENABLED=0 + +LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared" + +WORKDIR /go/src/github.com/cloudflare/cloudflared/ + +# copy our sources into the builder image +COPY . . + +# compile cloudflared +RUN GOOS=linux GOARCH=arm64 make cloudflared + +# use a distroless base image with glibc +FROM gcr.io/distroless/base-debian11:nonroot + +# copy our compiled binary +COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/ + +# run as non-privileged user +USER nonroot + +# command / entrypoint of container +ENTRYPOINT ["cloudflared", "--no-autoupdate"] +CMD ["version"]