mirror of
https://github.com/bitwarden/server.git
synced 2026-06-01 01:55:55 -05:00
116 lines
3.9 KiB
Docker
116 lines
3.9 KiB
Docker
###############################################
|
|
# Build stage #
|
|
###############################################
|
|
FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:10.0-noble AS build
|
|
|
|
# Docker buildx supplies these values
|
|
ARG TARGETPLATFORM
|
|
ARG BUILDPLATFORM
|
|
|
|
# Install base build dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
build-essential \
|
|
curl \
|
|
pkg-config \
|
|
libssl-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Rust toolchain on build platform
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y \
|
|
--default-toolchain stable \
|
|
--profile minimal \
|
|
--no-modify-path
|
|
|
|
ENV PATH="/root/.cargo/bin:${PATH}"
|
|
|
|
# Determine target architecture and install cross-compilation tools
|
|
RUN case "$TARGETPLATFORM" in \
|
|
"linux/amd64") \
|
|
RUST_TARGET=x86_64-unknown-linux-gnu && \
|
|
RID=linux-x64 && \
|
|
ARCH_PACKAGES="" \
|
|
;; \
|
|
"linux/arm64") \
|
|
RUST_TARGET=aarch64-unknown-linux-gnu && \
|
|
RID=linux-arm64 && \
|
|
ARCH_PACKAGES="gcc-aarch64-linux-gnu g++-aarch64-linux-gnu libc6-dev-arm64-cross" \
|
|
;; \
|
|
*) \
|
|
echo "Unsupported platform: $TARGETPLATFORM" && exit 1 \
|
|
;; \
|
|
esac \
|
|
&& if [ -n "$ARCH_PACKAGES" ]; then \
|
|
apt-get update && apt-get install -y $ARCH_PACKAGES && rm -rf /var/lib/apt/lists/* ; \
|
|
fi \
|
|
&& echo "RUST_TARGET=${RUST_TARGET}" >> /etc/build-env \
|
|
&& echo "RID=${RID}" >> /etc/build-env \
|
|
&& . /etc/build-env \
|
|
&& rustup target add ${RUST_TARGET} \
|
|
&& echo "Rust target: ${RUST_TARGET}, .NET RID: ${RID}"
|
|
|
|
# Configure Rust for cross-compilation with proper linkers
|
|
RUN . /etc/build-env \
|
|
&& mkdir -p /root/.cargo \
|
|
&& case "$TARGETPLATFORM" in \
|
|
"linux/amd64") \
|
|
echo "[target.x86_64-unknown-linux-gnu]" >> /root/.cargo/config.toml \
|
|
&& echo "linker = \"gcc\"" >> /root/.cargo/config.toml \
|
|
;; \
|
|
"linux/arm64") \
|
|
echo "[target.aarch64-unknown-linux-gnu]" >> /root/.cargo/config.toml \
|
|
&& echo "linker = \"aarch64-linux-gnu-gcc\"" >> /root/.cargo/config.toml \
|
|
;; \
|
|
esac
|
|
|
|
# Copy project files
|
|
WORKDIR /source
|
|
COPY . ./
|
|
|
|
# Restore .NET dependencies
|
|
WORKDIR /source/util/SeederApi
|
|
RUN . /etc/build-env && dotnet restore -r ${RID}
|
|
|
|
# Build the project with Rust support
|
|
WORKDIR /source/util/SeederApi
|
|
RUN . /etc/build-env \
|
|
&& export CARGO_TARGET_DIR=/tmp/cargo_target \
|
|
&& export NoWarn="CA1305;CS1591" \
|
|
&& rustc --version \
|
|
&& cargo --version \
|
|
&& echo "Building for Rust target: ${RUST_TARGET}, .NET RID: ${RID}" \
|
|
&& dotnet publish SeederApi.csproj \
|
|
-c Release \
|
|
--no-restore \
|
|
--self-contained \
|
|
/p:PublishSingleFile=true \
|
|
-r ${RID} \
|
|
-o /app/out
|
|
|
|
###############################################
|
|
# App stage #
|
|
###############################################
|
|
FROM mcr.microsoft.com/dotnet/aspnet:10.0-azurelinux3.0-distroless-extra AS app
|
|
|
|
ARG TARGETPLATFORM
|
|
LABEL com.bitwarden.product="bitwarden"
|
|
|
|
ENV SSL_CERT_DIR=/etc/bitwarden/ca-certificates
|
|
ENV DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=false
|
|
ENV ASPNETCORE_ENVIRONMENT=Production
|
|
ENV ASPNETCORE_URLS=http://+:5000
|
|
EXPOSE 5000
|
|
|
|
# Set up health check wrapper
|
|
# Get the executable and copy it to any path you want
|
|
COPY --from=ghcr.io/alexaka1/distroless-dotnet-healthchecks:1@sha256:d2a71a595020f13a9283f5e1f93c5f92bc2385c1d9b36e128a00d35863995aba / /healthcheck
|
|
# Setup your healthcheck endpoints via environment variable in Dockerfile, or at runtime via `docker run -e DISTROLESS_HEALTHCHECKS_URIS__0="http://localhost/healthz" -e DISTROLESS_HEALTHCHECKS_URIS__1="http://localhost/some/other/endpoint"`
|
|
ENV DISTROLESS_HEALTHCHECKS_URI="http://localhost:5000/alive"
|
|
# Setup the healthcheck using the EXEC array syntax
|
|
HEALTHCHECK CMD ["/healthcheck/Distroless.HealthChecks"]
|
|
|
|
# Copy app from the build stage
|
|
WORKDIR /app
|
|
COPY --from=build /app/out /app
|
|
|
|
ENTRYPOINT ["/app/SeederApi"]
|