32d7dd07e7
Add crane CLI to the runtime Dockerfile so the index builder can pull the latest SPA shell from the Forgejo container registry on each cycle. The existing syncSiteBuild logic checks for a newer image digest, extracts the dist/ assets via crane export, and overlays generated JSON data files on top before deploying to Cloudflare Pages. - Dockerfile: install go-containerregistry crane binary (v0.20.2) - sitebuild.go: new file with syncSiteBuild, craneDigest, craneExport, digest caching, fallback to baked-in /app/web/dist - main.go: wire initCraneAuth at startup, replace hardcoded webDistDir with syncSiteBuild call in runBuildCycle - sitebuild_test.go: 18 tests for extractRegistry, digest caching, fallback logic, crane auth config, and copyWebAssets overlay behavior Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
67 lines
1.6 KiB
Docker
67 lines
1.6 KiB
Docker
# Web frontend build stage
|
|
FROM node:22-alpine AS web-builder
|
|
WORKDIR /web
|
|
COPY web/package.json web/package-lock.json ./
|
|
RUN npm ci
|
|
COPY web/ .
|
|
RUN npm run build
|
|
|
|
# Go binary build stage
|
|
FROM golang:1.25-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Install build dependencies
|
|
RUN apk add --no-cache git ca-certificates tzdata
|
|
|
|
# Copy go mod files
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build the binary
|
|
RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /acb-index-builder ./cmd/acb-index-builder
|
|
|
|
# Runtime stage
|
|
FROM node:22-alpine
|
|
|
|
# Install wrangler CLI for Cloudflare Pages deployment
|
|
RUN npm install -g wrangler@3
|
|
|
|
# Install crane for pulling site build images from container registry
|
|
ARG CRANE_VERSION=v0.20.2
|
|
RUN apk add --no-cache curl && \
|
|
curl -fsSL "https://github.com/google/go-containerregistry/releases/download/${CRANE_VERSION}/go-containerregistry_Linux_x86_64.tar.gz" \
|
|
| tar -xz -C /usr/local/bin crane && \
|
|
chmod +x /usr/local/bin/crane && \
|
|
apk del curl
|
|
|
|
# Install ca-certificates for HTTPS calls
|
|
RUN apk add --no-cache ca-certificates tzdata
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /acb-index-builder /usr/local/bin/acb-index-builder
|
|
|
|
# Copy pre-built web frontend
|
|
COPY --from=web-builder /web/dist /app/web/dist
|
|
|
|
# Create data directory
|
|
RUN mkdir -p /data
|
|
|
|
# Set environment defaults
|
|
ENV ACB_OUTPUT_DIR=/data
|
|
ENV ACB_BUILD_INTERVAL=15m
|
|
ENV ACB_DEPLOY_INTERVAL=6
|
|
ENV ACB_MAX_LIFETIME=4h
|
|
ENV ACB_BUILD_TIMEOUT=10m
|
|
|
|
# Run as non-root user
|
|
RUN addgroup -g 1001 acb && adduser -u 1001 -G acb -s /bin/sh -D acb
|
|
RUN chown -R acb:acb /data
|
|
USER acb
|
|
|
|
ENTRYPOINT ["/usr/local/bin/acb-index-builder"]
|