# use a builder image for building cloudflare FROM golang:1.19 as builder ENV GO111MODULE=on \ CGO_ENABLED=0 LABEL org.opencontainers.image.source="https://github.com/cloudflare/cloudflared" WORKDIR /go/src/github.com/cloudflare/cloudflared/ # copy our sources into the builder image COPY . . # compile cloudflared RUN GOOS=linux GOARCH=amd64 make cloudflared # use a distroless base image with glibc FROM gcr.io/distroless/base-debian11:nonroot # copy our compiled binary COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/ # run as non-privileged user USER nonroot # command / entrypoint of container ENTRYPOINT ["cloudflared", "--no-autoupdate"] CMD ["version"]