Dockerfile RawHistoryFolder

1# syntax=docker/dockerfile:1
2
3# Release image: a static ermite binary on alpine with git and git-http-backend (ermite shells out to git >= 2.45).
4#
5#   docker build --build-arg VERSION="$(git describe --tags --always --dirty)" -t ermite .
6#
7# The modules bnema.dev/ermite-* are public and resolve through the bnema.dev vanity path.
8# GIT_REWRITE_BASE optionally rewrites the git host for builds behind a private route:
9#   --build-arg GIT_REWRITE_BASE=<url> --network host
10#
11# Base images are pinned to an Alpine minor release; bump them on purpose.
12
13FROM golang:1.27-alpine3.24 AS build
14RUN apk add --no-cache git
15ENV CGO_ENABLED=0 GOWORK=off GOTOOLCHAIN=local
16ARG GIT_REWRITE_BASE=
17RUN if [ -n "$GIT_REWRITE_BASE" ]; then \
18      git config --global url."$GIT_REWRITE_BASE".insteadOf https://git.bnema.dev/; \
19    fi
20WORKDIR /src
21COPY . .
22ARG VERSION=
23RUN --mount=type=cache,target=/go/pkg/mod \
24    --mount=type=cache,target=/root/.cache/go-build \
25    go build -trimpath -buildvcs=false -ldflags "-s -w -X bnema.dev/ermite/internal/app.stamped=${VERSION}" \
26      -o /out/ermite ./cmd/ermite
27
28FROM alpine:3.24
29# git-daemon provides git-http-backend on alpine. tini runs as PID 1: it forwards signals
30# to ermite and reaps the git processes that detach from pushes (auto maintenance).
31RUN apk add --no-cache git git-daemon ca-certificates tini \
32 && adduser -D -u 10001 -h /home/ermite ermite \
33 && mkdir /data \
34 && chown ermite:ermite /data
35COPY --from=build /out/ermite /usr/local/bin/ermite
36ENV ERMITE_DATA_DIR=/data ERMITE_LOG_FORMAT=json
37USER ermite
38WORKDIR /data
39VOLUME /data
40EXPOSE 7341
41ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/ermite"]
42CMD ["serve"]