-
Notifications
You must be signed in to change notification settings - Fork 23
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
0e5b3cd
commit ef61a6b
Showing
1 changed file
with
86 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,86 @@ | ||
# ================================ | ||
# Build image | ||
# ================================ | ||
FROM swift:5.10-jammy as build | ||
|
||
# Install OS updates | ||
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \ | ||
&& apt-get -q update \ | ||
&& apt-get -q dist-upgrade -y \ | ||
&& apt-get install -y libjemalloc-dev \ | ||
&& rm -rf /var/lib/apt/lists/* | ||
|
||
# Set up a build area | ||
WORKDIR /build | ||
|
||
# First just resolve dependencies. | ||
# This creates a cached layer that can be reused | ||
# as long as your Package.swift/Package.resolved | ||
# files do not change. | ||
COPY ./Package.* ./ | ||
RUN swift package resolve | ||
|
||
# Copy entire repo into container | ||
COPY . . | ||
|
||
# Build everything, with optimizations, with static linking, and using jemalloc | ||
RUN swift build -c release \ | ||
--static-swift-stdlib \ | ||
-Xlinker -ljemalloc | ||
|
||
# Switch to the staging area | ||
WORKDIR /staging | ||
|
||
# Copy main executable to staging area | ||
RUN cp "$(swift build --package-path /build -c release --show-bin-path)/App" ./ | ||
|
||
# Copy static swift backtracer binary to staging area | ||
RUN cp "/usr/libexec/swift/linux/swift-backtrace-static" ./ | ||
|
||
# Copy resources bundled by SPM to staging area | ||
RUN find -L "$(swift build --package-path /build -c release --show-bin-path)/" -regex '.*\.resources$' -exec cp -Ra {} ./ \; | ||
|
||
# Copy any resouces from the public directory if the directories exist | ||
# Ensure that by default, neither the directory nor any of its contents are writable. | ||
RUN [ -d /build/public ] && { mv /build/public ./public && chmod -R a-w ./public; } || true | ||
|
||
# ================================ | ||
# Run image | ||
# ================================ | ||
FROM ubuntu:jammy | ||
|
||
# Make sure all system packages are up to date, and install only essential packages. | ||
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \ | ||
&& apt-get -q update \ | ||
&& apt-get -q dist-upgrade -y \ | ||
&& apt-get -q install -y \ | ||
libjemalloc2 \ | ||
ca-certificates \ | ||
tzdata \ | ||
# If your app or its dependencies import FoundationNetworking, also install `libcurl4`. | ||
# libcurl4 \ | ||
# If your app or its dependencies import FoundationXML, also install `libxml2`. | ||
# libxml2 \ | ||
&& rm -r /var/lib/apt/lists/* | ||
|
||
# Create a hummingbird user and group with /app as its home directory | ||
RUN useradd --user-group --create-home --system --skel /dev/null --home-dir /app hummingbird | ||
|
||
# Switch to the new home directory | ||
WORKDIR /app | ||
|
||
# Copy built executable and any staged resources from builder | ||
COPY --from=build --chown=hummingbird:hummingbird /staging /app | ||
|
||
# Provide configuration needed by the built-in crash reporter and some sensible default behaviors. | ||
ENV SWIFT_BACKTRACE=enable=yes,sanitize=yes,threads=all,images=all,interactive=no,swift-backtrace=./swift-backtrace-static | ||
|
||
# Ensure all further commands run as the hummingbird user | ||
USER hummingbird:hummingbird | ||
|
||
# Let Docker bind to port 8080 | ||
EXPOSE 8080 | ||
|
||
# Start the Hummingbird service when the image is run, default to listening on 8080 in production environment | ||
ENTRYPOINT ["./App"] | ||
CMD ["--hostname", "0.0.0.0", "--port", "8080"] |