Docker image improvements

[sandhose]

The commits are individually reviewable. This includes:

• the docker image is now multi-arch capable thanks to BuildKit. It does not rely on QEMU emulation, rather using BuildKit's TARGETPLATFORM and BUILDPLATFORM build args for doing the bundling under the host arch
• use an unprivileged nginx base image to run as non-root. This also allows running the whole thing with a read-only root filesystem. It still needs a writable /tmp, e.g. docker run --publish 80:8080 --read-only --volume tmp:/tmp hydrogen
• have the CI build a multi-arch image (currently building for x86_64, ARM and ARM64)
• some updates to the documentation
• a config.json templated from environment variables

[bwindels]

As mentioned elsewhere, I don't think we want to load the config file like this. Why did you need to change it?

Apart from that, I don't know much about Docker, so can't really review that. If you're confident that these changes to the docker setup are an improvement and won't break, I'm happy to merge them.

[sandhose]

As mentioned elsewhere, I don't think we want to load the config file like this. Why did you need to change it?

This change is here to be able to change the config without rebuilding the app. Currently, the config lives in the bundled JS, which makes it impossible to change without rebuilding the app.

This allows to have on the filesystem a plain old config.js file that can be easily changed at runtime, and this is what is done in the Docker image: there is a config.js.tmpl which is templated by this script on the start of the container, which fills it with environement variable.

The end result, is that one can run the image with a custom default homeserver without having to build a custom one:

docker --rm -p 8080:8080 -e DEFAULT_HOMESERVER=https://my-hs.com ghcr.io/vector-im/hydrogen-web

If that is not desirable, I can move the config handling changes in another PR and merge the docker improvements first

[bwindels]

If that is not desirable, I can move the config handling changes in another PR and merge the docker improvements first

Thanks, that would be good.

[hughns]

Closing this in preference to the following smaller PRs:

• Install npm deps in separate docker layer #983
• Switch to Docker BuildKit and build both amd64 and arm64 images #948
• Allow config override in docker image #982
• Fix docs about docker registry #980

I've parked running nginx as non-root for now.