From bc627be6c0be395601b03708fe7c52d149bc98e0 Mon Sep 17 00:00:00 2001
From: Ivan Gabaldon <git@inetol.net>
Date: Fri, 22 Nov 2024 00:15:49 +0100
Subject: [PATCH] update runner image

---
 Dockerfile | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index d5a1c14..36836e4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,11 +6,17 @@ COPY . ./
 RUN bun install --frozen-lockfile && \
     bun run build:standalone
 
-FROM cgr.dev/chainguard/cc-dynamic:latest
+FROM docker.io/library/alpine:3.20
 WORKDIR /backend/
 
-COPY --chown=nonroot --from=builder /build/dist/backend ./
-COPY --chown=nonroot --from=builder /build/LICENSE ./
+# FIXME: https://github.com/oven-sh/bun/issues/15307
+RUN apk add --no-cache libgcc libstdc++
+
+RUN adduser -D -h /backend jspaste && \
+    chown jspaste:jspaste /backend/
+
+COPY --chown=jspaste:jspaste --from=builder /build/dist/backend ./
+COPY --chown=jspaste:jspaste --from=builder /build/LICENSE ./
 
 LABEL org.opencontainers.image.url="https://jspaste.eu" \
       org.opencontainers.image.source="https://github.com/jspaste/backend" \
@@ -19,6 +25,11 @@ LABEL org.opencontainers.image.url="https://jspaste.eu" \
       org.opencontainers.image.documentation="https://docs.jspaste.eu" \
       org.opencontainers.image.licenses="EUPL-1.2"
 
+ARG BUN_RUNTIME_TRANSPILER_CACHE_PATH=0
+ENV BUN_RUNTIME_TRANSPILER_CACHE_PATH=${BUN_RUNTIME_TRANSPILER_CACHE_PATH}
+
+USER jspaste
+
 VOLUME /backend/storage/
 EXPOSE 4000