blocky/Dockerfile

FROM --platform=$BUILDPLATFORM ghcr.io/euantorano/zig:master AS zig-env
# prepare build environment
FROM --platform=$BUILDPLATFORM golang:1-alpine AS build
RUN apk add --no-cache \
    ca-certificates \
    libcap

RUN update-ca-certificates 2>/dev/null || true
# required arguments(buildx will set target)
ARG VERSION
ARG BUILD_TIME
ARG TARGETOS
ARG TARGETARCH
ARG TARGETVARIANT

# create blocky user passwd file
RUN echo "blocky:x:100:65533:Blocky User,,,:/app:/sbin/nologin" > /tmp/blocky_passwd

# set working directory
WORKDIR /go/src

COPY ./docker /scripts
RUN chmod +x /scripts/*.sh

# download packages
COPY go.mod go.sum ./
RUN --mount=type=cache,target=/go/pkg \
    go mod download

# add source
COPY . .
RUN --mount=type=cache,target=/go/pkg \
    go generate ./...

# setup environment
RUN --mount=type=cache,target=/go/pkg \
    go install github.com/dosgo/zigtool/zigcc@latest && \
    go install github.com/dosgo/zigtool/zigcpp@latest
COPY --from=zig-env /usr/local/bin/zig /usr/local/bin/zig
ENV PATH="/usr/local/bin/zig:${PATH}" \
    CC="zigcc" \
    CXX="zigcpp" \
    CGO_ENABLED=0 \
    GOOS="linux" \
    GOARCH=$TARGETARCH

# build binary
RUN --mount=type=cache,target=/root/.cache/go-build \ 
    --mount=type=cache,target=/go/pkg \
    export GOARM=${TARGETVARIANT##*v} && \
    /scripts/printenv.sh && \
    go build \
    -tags static \
    -v \
    -ldflags="-X github.com/0xERR0R/blocky/util.Version=${VERSION} -X github.com/0xERR0R/blocky/util.BuildTime=${BUILD_TIME}" \
    -o /bin/blocky

RUN setcap 'cap_net_bind_service=+ep' /bin/blocky && \
    chown 100 /bin/blocky

# final stage
FROM scratch

#LABEL org.opencontainers.image.source="https://github.com/0xERR0R/blocky" \
#      org.opencontainers.image.url="https://github.com/0xERR0R/blocky" \
#      org.opencontainers.image.title="DNS proxy as ad-blocker for local network"

WORKDIR /app

#RUN cp /bin/blocky /app/blocky

COPY --from=build /tmp/blocky_passwd /etc/passwd
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=build /bin/blocky /app/blocky

USER blocky

ENV BLOCKY_CONFIG_FILE=/app/config.yml

ENTRYPOINT ["/app/blocky"]

HEALTHCHECK --interval=1m --timeout=3s CMD ["/app/blocky", "healthcheck"]