-
Notifications
You must be signed in to change notification settings - Fork 20
/
Dockerfile
59 lines (37 loc) · 1.48 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
FROM --platform=$BUILDPLATFORM cgr.dev/chainguard/go:1.20.5 as build
WORKDIR /src
ARG DNSCRYPT_PROXY_VERSION=2.1.4
ADD --chown=nonroot:nonroot https://github.com/DNSCrypt/dnscrypt-proxy/archive/${DNSCRYPT_PROXY_VERSION}.tar.gz /tmp/dnscrypt-proxy.tar.gz
RUN tar xzf /tmp/dnscrypt-proxy.tar.gz --strip 1
WORKDIR /src/dnscrypt-proxy
ARG TARGETOS TARGETARCH
ARG CGO_ENABLED=0 \
GOOS=$TARGETOS \
GOARCH=$TARGETARCH \
GOARM=$TARGETVARIANT
RUN --mount=type=cache,target=/home/nonroot/.cache/go-build,uid=65532,gid=65532 \
--mount=type=cache,target=/go/pkg \
go build -v -ldflags="-s -w" -mod vendor
WORKDIR /config
RUN cp -a /src/dnscrypt-proxy/example-* ./
COPY dnscrypt-proxy.toml ./
# ----------------------------------------------------------------------------
FROM --platform=$BUILDPLATFORM cgr.dev/chainguard/go:1.20.5 as probe
WORKDIR /src/dnsprobe
ARG TARGETOS TARGETARCH
ARG CGO_ENABLED=0 \
GOOS=$TARGETOS \
GOARCH=$TARGETARCH \
GOARM=$TARGETVARIANT
COPY dnsprobe/ ./
RUN go build -o /usr/local/bin/dnsprobe .
# ----------------------------------------------------------------------------
# hadolint ignore=DL3007
FROM cgr.dev/chainguard/static:latest
COPY --from=build /src/dnscrypt-proxy/dnscrypt-proxy /usr/local/bin/
COPY --from=probe /usr/local/bin/dnsprobe /usr/local/bin/
COPY --from=build --chown=nobody:nogroup /config /config
# TODO: switch to 'nonroot' user
USER nobody
ENTRYPOINT [ "dnscrypt-proxy" ]
CMD [ "-config", "/config/dnscrypt-proxy.toml" ]