MindSift CI & Docker Release / Build, Test in Container & Push (push) Successful in 1m37s
63 lines
2.3 KiB
Docker
63 lines
2.3 KiB
Docker
# ==============================================================================
|
|
# Stage 1: Frontend Check & Build (Cached npm dependencies layer)
|
|
# ==============================================================================
|
|
FROM node:22-alpine AS frontend-builder
|
|
WORKDIR /app/frontend
|
|
COPY frontend/package*.json ./
|
|
RUN npm install --no-audit --no-fund
|
|
COPY frontend/ ./
|
|
RUN npx tsc --noEmit && npm run build
|
|
|
|
# ==============================================================================
|
|
# Stage 2: Go Backend Lint, Unit Tests & Binary Build (Cached Go module & sqlite layer)
|
|
# ==============================================================================
|
|
FROM golang:1.23-alpine AS backend-builder
|
|
WORKDIR /app
|
|
RUN apk add --no-cache git ca-certificates
|
|
|
|
# Cache Go modules & pre-compile heavy dependencies (modernc.org/sqlite) in a dedicated layer
|
|
COPY go.mod ./
|
|
RUN go get github.com/go-chi/chi/v5@v5.2.0 \
|
|
github.com/go-chi/cors@v1.2.1 \
|
|
github.com/golang-jwt/jwt/v5@v5.2.1 \
|
|
github.com/gorilla/websocket@v1.5.3 \
|
|
golang.org/x/crypto/bcrypt@v0.31.0 \
|
|
modernc.org/sqlite@v1.34.4 && \
|
|
CGO_ENABLED=0 go build \
|
|
modernc.org/sqlite \
|
|
github.com/go-chi/chi/v5 \
|
|
github.com/go-chi/cors \
|
|
github.com/golang-jwt/jwt/v5 \
|
|
github.com/gorilla/websocket \
|
|
golang.org/x/crypto/bcrypt
|
|
|
|
# Copy application source & compiled frontend SPA assets for go:embed
|
|
COPY cmd/ ./cmd/
|
|
COPY internal/ ./internal/
|
|
COPY migrations/ ./migrations/
|
|
COPY --from=frontend-builder /app/frontend/dist ./cmd/server/dist
|
|
|
|
# Run go mod tidy, static analysis (go vet), unit tests (go test), and compile final binary
|
|
RUN go mod tidy && \
|
|
CGO_ENABLED=0 go vet ./... && \
|
|
CGO_ENABLED=0 go test -v ./... && \
|
|
CGO_ENABLED=0 go build -ldflags="-s -w" -o /app/mindsift ./cmd/server
|
|
|
|
# ==============================================================================
|
|
# Stage 3: Minimal Production Runtime (< 35 MB)
|
|
# ==============================================================================
|
|
FROM alpine:3.21
|
|
RUN apk add --no-cache ca-certificates tzdata && \
|
|
mkdir -p /data /tmp && \
|
|
chmod 1777 /tmp
|
|
|
|
WORKDIR /app
|
|
COPY --from=backend-builder /app/mindsift /app/mindsift
|
|
|
|
ENV PORT=8080
|
|
ENV DATA_DIR=/data
|
|
VOLUME ["/data"]
|
|
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["/app/mindsift"]
|