Dockerfile RawHistoryFolder

1# syntax=docker/dockerfile:1
2
3# Release image: a static ermite binary on alpine with git and git-http-backend (ermite shells out to git >= 2.45).
4#
5#   docker build --build-arg VERSION="$(git describe --tags --always --dirty)" -t ermite .
6#
7# The modules bnema.dev/ermite-* are private and resolve through git.bnema.dev, which is
8# reachable from the NetBird network only. The build container uses the host's DNS and
9# routes, so on a NetBird host it needs nothing more. Behind a different route (CI), set
10#   --build-arg GIT_REWRITE_BASE=http://git.bnema.dev:8088/ --network host
11# to fetch the modules over that URL instead of https://git.bnema.dev/.
12#
13# Base images are pinned to an Alpine minor release; bump them on purpose.
14
15FROM golang:1.27-alpine3.24 AS build
16RUN apk add --no-cache git
17ENV CGO_ENABLED=0 GOWORK=off GOTOOLCHAIN=local GOPRIVATE=bnema.dev/ermite*
18ARG GIT_REWRITE_BASE=
19RUN if [ -n "$GIT_REWRITE_BASE" ]; then \
20      git config --global url."$GIT_REWRITE_BASE".insteadOf https://git.bnema.dev/; \
21    fi
22WORKDIR /src
23COPY . .
24ARG VERSION=
25RUN --mount=type=cache,target=/go/pkg/mod \
26    --mount=type=cache,target=/root/.cache/go-build \
27    go build -trimpath -buildvcs=false -ldflags "-s -w -X main.stamped=${VERSION}" \
28      -o /out/ermite ./cmd/ermite
29
30FROM alpine:3.24
31# git-daemon provides git-http-backend on alpine. tini runs as PID 1: it forwards signals
32# to ermite and reaps the git processes that detach from pushes (auto maintenance).
33RUN apk add --no-cache git git-daemon ca-certificates tini \
34 && adduser -D -u 10001 -h /home/ermite ermite \
35 && mkdir /data \
36 && chown ermite:ermite /data
37COPY --from=build /out/ermite /usr/local/bin/ermite
38ENV ERMITE_DATA_DIR=/data ERMITE_LOG_FORMAT=json
39USER ermite
40WORKDIR /data
41VOLUME /data
42EXPOSE 7341
43ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/ermite"]
44CMD ["serve"]