Dreaded_X/lldap-controller
1
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

Switched to nonroot distroless base and improved layer caching

Browse Source
This commit is contained in:
Dreaded_X 2025-03-21 03:34:30 +01:00
parent 16dc78358d
commit 1b2e0faece
Signed by: Dreaded_X
GPG Key ID: FA5F485356B0D2D4
2 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/workflows/build.yaml
View File

@ -59,7 +59,7 @@ jobs:
- name: Generate CRDs - name: Generate CRDs
run: | run: |
docker run --rm ${{ steps.build.outputs.imageid }} crdgen > ./manifests/crds.yaml docker run --rm ${{ steps.build.outputs.imageid }} /crdgen > ./manifests/crds.yaml
- name: Push container - name: Push container
uses: docker/build-push-action@v6 uses: docker/build-push-action@v6

27
Dockerfile
View File

@ -1,9 +1,20 @@
FROM rust:1.85 AS builder FROM rust:1.85 AS chef
WORKDIR /usr/src/lldap-controller ENV CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse
ADD . . RUN cargo install cargo-chef --locked --version 0.1.71
RUN cargo install --path . WORKDIR /app
FROM debian:bookworm-slim FROM chef AS planner
COPY --from=builder /usr/local/cargo/bin/lldap-controller /usr/local/bin/lldap-controller COPY . .
COPY --from=builder /usr/local/cargo/bin/crdgen /usr/local/bin/crdgen RUN cargo chef prepare --recipe-path recipe.json
CMD ["lldap-controller"]
FROM chef AS builder
COPY --from=planner /app/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json
COPY . .
RUN cargo build --release
FROM gcr.io/distroless/cc-debian12:nonroot AS runtime
COPY --from=builder /app/target/release/lldap-controller /lldap-controller
COPY --from=builder /app/target/release/crdgen /crdgen
CMD ["/lldap-controller"]