mirror of
https://github.com/matrix-org/dendrite
synced 2024-09-18 00:48:54 +02:00
e6c992ba8b
Updates/adds a new multistage (build-kit) Dockerfile. (if accepted, could make `Dockerfile.monolith` and `Dockerfile.polylith` in `build/docker` obsolete) There's no huge difference between the dockerfiles, except this uses a non-root user when running the container, also doesn't copy the working directory to the image when building. Also adds vulnerabilities scans using [Trivy](https://github.com/aquasecurity/trivy) for the created docker images. (untested) Building images is done using ``` docker build . --target image-monolith -t dendrite-monolith docker build . --target image-polylith -t dendrite-polylith ``` As noted in the comments, only adds `dendrite-polylith-multi` to the polylith image and all required binaries to the monolith image. Probably needs some docs updating, if this is accepted. Co-authored-by: Neil Alexander <neilalexander@users.noreply.github.com>
67 lines
2 KiB
Bash
67 lines
2 KiB
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
# In order to cross-compile with the multi-stage Docker builds, we need to
|
|
# ensure that the suitable toolchain for cross-compiling is installed. Since
|
|
# the images are Alpine-based, we will use musl. Download and install the
|
|
# toolchain inside the build container.
|
|
|
|
USERARCH=`go env GOARCH`
|
|
GOARCH="$TARGETARCH"
|
|
GOOS="linux"
|
|
|
|
echo "Target arch: $TARGETARCH"
|
|
echo "User arch: $USERARCH"
|
|
|
|
if [ "$TARGETARCH" != "$USERARCH" ]; then
|
|
if [ "$USERARCH" != "amd64" ]; then
|
|
echo "Cross-compiling only supported on amd64"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Cross compile"
|
|
case $GOARCH in
|
|
arm64)
|
|
curl -s https://more.musl.cc/x86_64-linux-musl/aarch64-linux-musl-cross.tgz | tar xz --strip-components=1 -C /usr
|
|
export CC=aarch64-linux-musl-gcc
|
|
;;
|
|
|
|
amd64)
|
|
curl -s https://more.musl.cc/x86_64-linux-musl/x86_64-linux-musl-cross.tgz | tar xz --strip-components=1 -C /usr
|
|
export CC=x86_64-linux-musl-gcc
|
|
;;
|
|
|
|
386)
|
|
curl -s https://more.musl.cc/x86_64-linux-musl/i686-linux-musl-cross.tgz | tar xz --strip-components=1 -C /usr
|
|
export CC=i686-linux-musl-gcc
|
|
;;
|
|
|
|
arm)
|
|
curl -s https://more.musl.cc/x86_64-linux-musl/armv7l-linux-musleabihf-cross.tgz | tar xz --strip-components=1 -C /usr
|
|
export CC=armv7l-linux-musleabihf-gcc
|
|
;;
|
|
|
|
s390x)
|
|
curl -s https://more.musl.cc/x86_64-linux-musl/s390x-linux-musl-cross.tgz | tar xz --strip-components=1 -C /usr
|
|
export CC=s390x-linux-musl-gcc
|
|
;;
|
|
|
|
ppc64le)
|
|
curl -s https://more.musl.cc/x86_64-linux-musl/powerpc64le-linux-musl-cross.tgz | tar xz --strip-components=1 -C /usr
|
|
export CC=powerpc64le-linux-musl-gcc
|
|
;;
|
|
|
|
*)
|
|
echo "Unsupported GOARCH=${GOARCH}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
else
|
|
echo "Native compile"
|
|
fi
|
|
|
|
# Output the go environment just in case it is useful for debugging.
|
|
go env
|
|
|
|
# Build Dendrite and tools, statically linking them.
|
|
CGO_ENABLED=1 go build -v -ldflags="-linkmode external -extldflags -static ${FLAGS}" -trimpath -o /out/ ./cmd/...
|