Skip to content

wip: test using chainguard as base images #283

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mdtro wants to merge 2 commits into from
Closed

wip: test using chainguard as base images #283

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
bf94c6a
wip: test using chainguard as base images
mdtro Mar 27, 2025
c630624
remove some redundant steps
mdtro Mar 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
41 changes: 20 additions & 21 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,15 @@
# Build image
# Note that it is important which debian image is used, because not all of them have a
# recent enough version of protobuf-compiler
FROM rust:1-bookworm AS build
FROM cgr.dev/chainguard/rust:latest-dev AS build

RUN apt-get update && apt-get upgrade -y
RUN apt-get install -y cmake pkg-config libssl-dev librdkafka-dev protobuf-compiler
# The -dev variant includes package manager and shell for building
# Switch to root to install packages
USER root
# Use correct package names for Wolfi
RUN apk add cmake pkgconf openssl-dev librdkafka-dev protobuf protobuf-dev

# Find where protoc is located and set the environment variable
RUN which protoc || echo "protoc not found"
ENV PROTOC=/usr/bin/protoc

RUN USER=root cargo new --bin taskbroker
WORKDIR /taskbroker
Expand All @@ -22,38 +27,32 @@ COPY ./migrations ./migrations
COPY ./config/${CONFIG_FILE} ./config.yaml
COPY ./benches ./benches

# Build dependencies in a way they can be cached
RUN cargo build --release
RUN rm src/*.rs
RUN echo "${TASKBROKER_VERSION}" > ./VERSION

# Copy source tree
COPY ./src ./src

# Build the main binary
RUN rm ./target/release/deps/taskbroker*
RUN cargo build --release

RUN echo "${TASKBROKER_VERSION}" > ./VERSION
# Create directory for sqlite
RUN mkdir -p /opt/sqlite

# Runtime image
FROM rust:1-bookworm

# Necessary for libssl bindings
RUN apt-get update && apt-get upgrade -y && apt-get install -y libssl-dev
# Runtime image - use minimal image with only required libraries
FROM cgr.dev/chainguard/glibc-dynamic:latest

# Expose the service port
EXPOSE 50051

# For the sqlite to be mounted too
RUN mkdir /opt/sqlite

# Import the built binary and config file and run it
# Import the built binary and config file
COPY --from=build /taskbroker/VERSION /opt/VERSION
COPY --from=build /taskbroker/config.yaml /opt/config.yaml
COPY --from=build /taskbroker/target/release/taskbroker /opt/taskbroker

WORKDIR /opt

USER nonroot

CMD ["/opt/taskbroker", "--config", "/opt/config.yaml"]

# To build and run locally:
# docker build -t taskbroker --no-cache . && docker rm taskbroker && docker run --name taskbroker -p 127.0.0.1:50051:50051 -e TASKBROKER_KAFKA_CLUSTER=sentry_kafka:9093 --network sentry taskbroker
# docker build -t taskbroker --no-cache . && docker rm taskbroker && docker run --name taskbroker -p 127.0.0.1:50051:50051 -e TASKBROKER_KAFKA_CLUSTER=sentry_kafka:9093 --network sentry taskbroker
Loading