forked from freudenreichan/EinfuehrungInDocker_Pipeline2
This commit is contained in:
parent
6d3b541837
commit
66c426f4d8
49
Dockerfile
49
Dockerfile
@ -1,38 +1,47 @@
|
|||||||
# Base-Image - Alpine statt Ubuntu
|
# Base-Image
|
||||||
FROM alpine:latest AS build
|
FROM alpine:3.22 AS builder
|
||||||
|
|
||||||
# Build-Tools installieren
|
# Pakete installieren + Updates einspielen
|
||||||
RUN apk add --no-cache gcc musl-dev
|
RUN apk upgrade --no-cache && apk add --no-cache gcc musl-dev
|
||||||
|
|
||||||
# Arbeitsverzeichnis setzen
|
# Arbeitsverzeichnis setzen
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
# Code kopieren und kompilieren
|
# alles kopieren
|
||||||
COPY deployment.c .
|
COPY . .
|
||||||
RUN gcc -o deployment deployment.c
|
|
||||||
|
|
||||||
# Finales schlankes Image
|
# Code kompilieren
|
||||||
FROM alpine:latest
|
RUN gcc -O2 -o deployment deployment.c
|
||||||
|
|
||||||
# Nicht als root laufen
|
|
||||||
RUN adduser -D appuser
|
|
||||||
|
|
||||||
|
# Base-Image
|
||||||
|
FROM alpine:3.22
|
||||||
|
|
||||||
|
# Sicherheitsupdates einspielen
|
||||||
|
RUN apk upgrade --no-cache
|
||||||
|
|
||||||
|
# Arbeitsverzeichnis setzen
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
# Nur das Binary kopieren
|
# kompiliertes Programm kopieren
|
||||||
COPY --from=build /app/deployment .
|
COPY --from=builder /app/deployment /app/deployment
|
||||||
|
|
||||||
# Ausgabeverzeichnis anlegen und Rechte setzen
|
# Verzeichnis für Ausgabe anlegen + User erstellen
|
||||||
RUN mkdir /output && chown appuser /output
|
RUN addgroup -S appuser \
|
||||||
|
&& adduser -S appuser -G appuser \
|
||||||
|
&& mkdir /output \
|
||||||
|
&& chown -R appuser:appuser /app /output
|
||||||
|
|
||||||
# Volume für Ausgabe
|
# Datavolume für Ausgabe
|
||||||
VOLUME /output
|
VOLUME ["/output"]
|
||||||
|
|
||||||
# User wechseln
|
# nicht als root laufen
|
||||||
USER appuser
|
USER appuser
|
||||||
|
|
||||||
# Healthcheck
|
# Healthcheck
|
||||||
HEALTHCHECK --interval=30s --timeout=5s CMD pgrep deployment || exit 1
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
||||||
|
CMD test -s /output/output.txt || exit 1
|
||||||
|
|
||||||
|
# Ausgabe wird ins Volume geschrieben
|
||||||
ENTRYPOINT ["/bin/sh", "-c"]
|
ENTRYPOINT ["/bin/sh", "-c"]
|
||||||
CMD ["./deployment 10 > /output/output.txt && tail -f /output/output.txt"]
|
CMD ["touch /output/output.txt && ./deployment 10 >> /output/output.txt & tail -f /output/output.txt"]
|
||||||
Loading…
x
Reference in New Issue
Block a user