Dockerfile

################################
#### Build
FROM rust:1.69.0 as builder
ENV PKG_CONFIG_ALLOW_CROSS=1

# Build prep
RUN apt-get update
RUN apt-get install musl-tools libssl-dev build-essential -y
RUN rustup target add x86_64-unknown-linux-musl
WORKDIR /usr/src
RUN USER=root cargo new kufefe
COPY Cargo.toml Cargo.lock /usr/src/kufefe/
WORKDIR /usr/src/kufefe
RUN cargo build --target x86_64-unknown-linux-musl --release
COPY src /usr/src/kufefe/src/
RUN touch /usr/src/kufefe/src/main.rs

# Actual build
RUN cargo build --target x86_64-unknown-linux-musl --release

################################
#### Runtime
FROM alpine:3.17 as runtime

# User Input
ENV RUST_LOG 'kufefe=info'

WORKDIR /app

# Create the non-root user
RUN addgroup -S appadmin -g 1000 && adduser -S appadmin -G appadmin -D -u 1000

# Don't touch these
ENV LC_COLLATE en_US.UTF-8
ENV LC_CTYPE UTF-8
ENV LC_MESSAGES en_US.UTF-8
ENV LC_MONETARY en_US.UTF-8
ENV LC_NUMERIC en_US.UTF-8
ENV LC_TIME en_US.UTF-8
ENV LC_ALL en_US.UTF-8
ENV LANG en_US.UTF-8

# Copy the binary
COPY --from=builder /usr/src/kufefe/target/x86_64-unknown-linux-musl/release/kufefe /usr/local/bin/kufefe
RUN chmod +x /usr/local/bin/kufefe
RUN chown appadmin:appadmin /usr/local/bin/kufefe

# Run as non-root
USER appadmin
CMD ["/usr/local/bin/kufefe"]