invidious-experimenting/docker/Dockerfile

FROM crystallang/crystal:0.35.0-alpine AS builder
RUN apk add --no-cache curl sqlite-static
WORKDIR /invidious
COPY ./shard.yml ./shard.yml
RUN shards update && shards install && \
    # TODO: Document build instructions
    # See https://github.com/omarroth/boringssl-alpine/blob/master/APKBUILD,
    # https://github.com/omarroth/lsquic-alpine/blob/master/APKBUILD,
    # https://github.com/omarroth/lsquic.cr/issues/1#issuecomment-631610081
    # for details building static lib
    curl -Lo ./lib/lsquic/src/lsquic/ext/liblsquic.a https://omar.yt/lsquic/liblsquic.a
COPY ./src/ ./src/
# TODO: .git folder is required for building – this is destructive.
# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
COPY ./.git/ ./.git/
RUN crystal build ./src/invidious.cr \
    --static --warnings all \
    --link-flags "-lxml2 -llzma"

FROM alpine:latest
RUN apk add --no-cache librsvg ttf-opensans
WORKDIR /invidious
RUN addgroup -g 1000 -S invidious && \
    adduser -u 1000 -S invidious -G invidious
COPY ./assets/ ./assets/
COPY --chown=invidious ./config/config.yml ./config/config.yml
RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
COPY ./config/sql/ ./config/sql/
COPY ./locales/ ./locales/
COPY --from=builder /invidious/invidious .

USER invidious
CMD [ "/invidious/invidious" ]
-												Switch to official crystallang alpine image (#1247)

* Switch to official crystal-lang alpine image
											
										
										
											2020-06-17 04:34:41 +05:30
+								FROM crystallang/crystal:0.35.0-alpine AS builder
 								RUN apk add --no-cache curl sqlite-static
-												basic docker-compose cluster

											
										
										
											2018-09-26 13:16:08 +05:30
+								WORKDIR /invidious
-												Verify download, fix invidious file permission (#949)

* Fix docker
											
										
										
											2020-05-01 07:05:34 +05:30
+								COPY ./shard.yml ./shard.yml
 								RUN shards update && shards install && \
-												Update docker build

											
										
										
											2020-05-30 06:36:43 +05:30
+								    # TODO: Document build instructions
 								    # See https://github.com/omarroth/boringssl-alpine/blob/master/APKBUILD,
 								    # https://github.com/omarroth/lsquic-alpine/blob/master/APKBUILD,
 								    # https://github.com/omarroth/lsquic.cr/issues/1#issuecomment-631610081
 								    # for details building static lib
 								    curl -Lo ./lib/lsquic/src/lsquic/ext/liblsquic.a https://omar.yt/lsquic/liblsquic.a
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								COPY ./src/ ./src/
 								# TODO: .git folder is required for building – this is destructive.
 								# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
 								COPY ./.git/ ./.git/
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								RUN crystal build ./src/invidious.cr \
-												Switch to official crystallang alpine image (#1247)

* Switch to official crystal-lang alpine image
											
										
										
											2020-06-17 04:34:41 +05:30
+								    --static --warnings all \
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								    --link-flags "-lxml2 -llzma"
-												basic docker-compose cluster

											
										
										
											2018-09-26 13:16:08 +05:30
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								FROM alpine:latest
-												Remove dependency on ImageMagick (replace with rsvg-convert)

											
										
										
											2019-10-28 20:16:59 +05:30
+								RUN apk add --no-cache librsvg ttf-opensans
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								WORKDIR /invidious
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								RUN addgroup -g 1000 -S invidious && \
 								    adduser -u 1000 -S invidious -G invidious
 								COPY ./assets/ ./assets/
-												Verify download, fix invidious file permission (#949)

* Fix docker
											
										
										
											2020-05-01 07:05:34 +05:30
+								COPY --chown=invidious ./config/config.yml ./config/config.yml
 								RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								COPY ./config/sql/ ./config/sql/
 								COPY ./locales/ ./locales/
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								COPY --from=builder /invidious/invidious .
-												Verify download, fix invidious file permission (#949)

* Fix docker
											
										
										
											2020-05-01 07:05:34 +05:30
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								USER invidious
-												basic docker-compose cluster

											
										
										
											2018-09-26 13:16:08 +05:30
+								CMD [ "/invidious/invidious" ]