Matthieu Sieben
82 lines
3.1 KiB
Docker
82 lines
3.1 KiB
Docker
FROM node:18-alpine AS build
|
|
|
|
RUN corepack enable
|
|
|
|
WORKDIR /app
|
|
|
|
COPY ./package.json ./
|
|
RUN corepack prepare --activate
|
|
|
|
# Move files into the image and install
|
|
COPY ./*.* ./
|
|
COPY ./tsconfig ./tsconfig
|
|
COPY ./lexicons ./lexicons
|
|
COPY ./packages/internal ./packages/internal
|
|
COPY ./packages/lex ./packages/lex
|
|
|
|
# NOTE ozones's transitive dependencies go here: if that changes, this needs to be updated.
|
|
# pnpm list --filter '@atproto/aws...' --filter '@atproto/ozone...' --depth 0 --json | jq '.[].path' | grep -v "/lex/" | grep -v "/internal/" | sort -u
|
|
COPY ./packages/api ./packages/api
|
|
COPY ./packages/aws ./packages/aws
|
|
COPY ./packages/bsky ./packages/bsky
|
|
COPY ./packages/common ./packages/common
|
|
COPY ./packages/common-web ./packages/common-web
|
|
COPY ./packages/crypto ./packages/crypto
|
|
COPY ./packages/did ./packages/did
|
|
COPY ./packages/identity ./packages/identity
|
|
COPY ./packages/lex-cli ./packages/lex-cli
|
|
COPY ./packages/lexicon ./packages/lexicon
|
|
COPY ./packages/oauth/jwk ./packages/oauth/jwk
|
|
COPY ./packages/oauth/jwk-jose ./packages/oauth/jwk-jose
|
|
COPY ./packages/oauth/jwk-webcrypto ./packages/oauth/jwk-webcrypto
|
|
COPY ./packages/oauth/oauth-client ./packages/oauth/oauth-client
|
|
COPY ./packages/oauth/oauth-client-browser ./packages/oauth/oauth-client-browser
|
|
COPY ./packages/oauth/oauth-client-browser-example ./packages/oauth/oauth-client-browser-example
|
|
COPY ./packages/oauth/oauth-provider ./packages/oauth/oauth-provider
|
|
COPY ./packages/oauth/oauth-provider-api ./packages/oauth/oauth-provider-api
|
|
COPY ./packages/oauth/oauth-provider-ui ./packages/oauth/oauth-provider-ui
|
|
COPY ./packages/oauth/oauth-scopes ./packages/oauth/oauth-scopes
|
|
COPY ./packages/oauth/oauth-types ./packages/oauth/oauth-types
|
|
COPY ./packages/ozone ./packages/ozone
|
|
COPY ./packages/pds ./packages/pds
|
|
COPY ./packages/repo ./packages/repo
|
|
COPY ./packages/sync ./packages/sync
|
|
COPY ./packages/syntax ./packages/syntax
|
|
COPY ./packages/ws-client ./packages/ws-client
|
|
COPY ./packages/xrpc ./packages/xrpc
|
|
COPY ./packages/xrpc-server ./packages/xrpc-server
|
|
|
|
COPY ./services/ozone ./services/ozone
|
|
|
|
# install all deps
|
|
RUN PUPPETEER_SKIP_DOWNLOAD=true pnpm install --frozen-lockfile
|
|
# build all packages with external node_modules
|
|
RUN pnpm run --recursive --stream --filter '@atproto/aws...' --filter '@atproto/ozone...' build
|
|
# install only prod deps, hoisted to root node_modules dir
|
|
RUN pnpm install --prod --shamefully-hoist --frozen-lockfile --prefer-offline --config.confirmModulesPurge=false
|
|
|
|
WORKDIR services/ozone
|
|
|
|
# Uses assets from build stage to reduce build size
|
|
FROM node:18-alpine
|
|
|
|
RUN apk add --update dumb-init
|
|
|
|
# Avoid zombie processes, handle signal forwarding
|
|
ENTRYPOINT ["dumb-init", "--"]
|
|
|
|
WORKDIR /app/services/ozone
|
|
COPY --from=build /app /app
|
|
|
|
EXPOSE 3000
|
|
ENV PORT=3000
|
|
ENV NODE_ENV=production
|
|
|
|
# https://github.com/nodejs/docker-node/blob/master/docs/BestPractices.md#non-root-user
|
|
USER node
|
|
CMD ["node", "--enable-source-maps", "api.js"]
|
|
|
|
LABEL org.opencontainers.image.source=https://github.com/bluesky-social/atproto
|
|
LABEL org.opencontainers.image.description="Ozone"
|
|
LABEL org.opencontainers.image.licenses=MIT
|