67 lines
2.1 KiB
Docker
67 lines
2.1 KiB
Docker
|
FROM alpine:3.14 AS liblsquic-builder
|
|||
|
|
WORKDIR /src
|
|||
|
|
|
|||
|
|
RUN apk add --no-cache build-base git apk-tools abuild cmake go perl linux-headers
|
|||
|
|
|
|||
|
|
RUN abuild-keygen -a -n && \
|
|||
|
|
cp /root/.abuild/-*.rsa.pub /etc/apk/keys/
|
|||
|
|
|
|||
|
|
COPY docker/APKBUILD-boringssl boringssl/APKBUILD
|
|||
|
|
RUN cd boringssl && abuild -F -r && cd ..
|
|||
|
|
|
|||
|
|
RUN apk add --repository /root/packages/src boringssl boringssl-dev boringssl-static
|
|||
|
|
|
|||
|
|
RUN apk add --no-cache zlib-dev zlib-static libevent-dev libevent-static
|
|||
|
|
|
|||
|
|
COPY docker/APKBUILD-lsquic lsquic/APKBUILD
|
|||
|
|
RUN cd lsquic && abuild -F -r && cd ..
|
|||
|
|
|
|||
|
|
RUN apk add --repository /root/packages/src lsquic-static
|
|||
|
|
|
|||
|
|
RUN mkdir tmp && cd tmp && \
|
|||
|
|
ar -x /usr/lib/libssl.a && \
|
|||
|
|
ar -x /usr/lib/libcrypto.a && \
|
|||
|
|
ar -x /usr/lib/liblsquic.a && \
|
|||
|
|
ar rc liblsquic.a *.o && \
|
|||
|
|
strip --strip-unneeded liblsquic.a && \
|
|||
|
|
ranlib liblsquic.a && \
|
|||
|
|
cp liblsquic.a /root/liblsquic.a && \
|
|||
|
|
cd .. && rm -rf tmp
|
|||
|
|
|
|||
|
|
|
|||
|
|
FROM alpine:3.14 AS builder
|
|||
|
|
RUN apk add --no-cache 'crystal<2' shards sqlite-static yaml-static yaml-dev libxml2-dev zlib-static openssl-libs-static openssl-dev musl-dev
|
|||
|
|
|
|||
|
|
WORKDIR /invidious
|
|||
|
|
COPY ./shard.yml ./shard.yml
|
|||
|
|
COPY ./shard.lock ./shard.lock
|
|||
|
|
RUN shards install
|
|||
|
|
|
|||
|
|
COPY --from=liblsquic-builder /root/liblsquic.a ./lib/lsquic/src/lsquic/ext/liblsquic.a
|
|||
|
|
|
|||
|
|
COPY ./src/ ./src/
|
|||
|
|
# TODO: .git folder is required for building – this is destructive.
|
|||
|
|
# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
|
|||
|
|
COPY ./.git/ ./.git/
|
|||
|
|
RUN crystal build ./src/invidious.cr \
|
|||
|
|
--static --warnings all \
|
|||
|
|
--link-flags "-lxml2 -llzma"
|
|||
|
|
|
|||
|
|
FROM alpine:latest
|
|||
|
|
RUN apk add --no-cache librsvg ttf-opensans
|
|||
|
|
WORKDIR /invidious
|
|||
|
|
RUN addgroup -g 1000 -S invidious && \
|
|||
|
|
adduser -u 1000 -S invidious -G invidious
|
|||
|
|
COPY ./assets/ ./assets/
|
|||
|
|
COPY --chown=invidious ./config/config.* ./config/
|
|||
|
|
RUN mv -n config/config.example.yml config/config.yml
|
|||
|
|
RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
|
|||
|
|
COPY ./config/sql/ ./config/sql/
|
|||
|
|
COPY ./locales/ ./locales/
|
|||
|
|
COPY --from=builder /invidious/invidious .
|
|||
|
|
RUN chmod o+rX -R ./assets ./config ./locales
|
|||
|
|
|
|||
|
|
EXPOSE 3000
|
|||
|
|
USER invidious
|
|||
|
|
CMD [ "/invidious/invidious" ]
|