forked from ethereum/kzg-ceremony-sequencer
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile
59 lines (44 loc) · 1.34 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
FROM rust:1.63 as build-env
WORKDIR /src
RUN apt-get update &&\
apt-get install -y libssl-dev texinfo libcap2-bin &&\
apt-get clean && rm -rf /var/lib/apt/lists/*
ARG BIN=rust-app
# Copy over all releases
COPY ./target ./target
# Select the binary for current architecture
RUN cp ./target/$(uname -m)-unknown-linux-musl/release/${BIN} ./bin
# Set capabilities
RUN setcap cap_net_bind_service=+ep ./bin
# Make sure it runs
RUN ./bin --version
# Fetch latest certificates
RUN update-ca-certificates --verbose
################################################################################
# Create minimal docker image for our app
FROM scratch
# Drop priviliges
USER 10001:10001
# Configure SSL CA certificates
COPY --from=build-env --chown=0:10001 --chmod=040 \
/etc/ssl/certs/ca-certificates.crt /
ENV SSL_CERT_FILE="/ca-certificates.crt"
# Configure logging
ENV VEBOSE=3
ENV LOG_FORMAT="tiny"
# Volume for data
VOLUME /data
ENV DATABASE_URL="sqlite:///data/storage.sqlite"
ENV TRANSCRIPT_FILE="/data/transcript.json"
ENV TRANSCRIPT_IN_PROGRESS_FILE="/data/transcript.json.wip"
# Metrics server
ENV PROMETHEUS="http://0.0.0.0:9998/metrics"
EXPOSE 9998
# API Server
ENV SERVER="http://0.0.0.0:8080/"
EXPOSE 8080
# Executable
COPY --from=build-env --chown=0:10001 --chmod=010 /src/bin /bin
STOPSIGNAL SIGTERM
HEALTHCHECK NONE
ENTRYPOINT ["/bin"]