sandrodachandClaude Opus 5.5
141f87f3a0
MindSift CI & Docker Release / Build, Test in Container & Push (push) Successful in 2m39s
CI keeps the 'test once per code state' plan but records commit and git tree as image labels instead of extra :sha-/:tree- tags, so the registry only holds dev, latest, vX.Y.Z and stable; the plan test now asserts the expected decisions. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
81 lines
3.1 KiB
Docker
81 lines
3.1 KiB
Docker
# ==============================================================================
|
|
# Stage 1: Frontend Check & Build (Cached npm dependencies layer)
|
|
# ==============================================================================
|
|
FROM node:22-alpine AS frontend-builder
|
|
WORKDIR /app/frontend
|
|
COPY frontend/package*.json ./
|
|
RUN --mount=type=cache,target=/root/.npm npm install --no-audit --no-fund
|
|
COPY frontend/ ./
|
|
# Version shown in the header: the git tag for releases (set by CI), otherwise "<package version>-dev"
|
|
ARG APP_VERSION=""
|
|
ARG SKIP_TESTS=0
|
|
RUN if [ "$SKIP_TESTS" != "1" ]; then \
|
|
npx tsc --noEmit && npm run lint && npm run test:run; \
|
|
else \
|
|
echo "Skipping frontend tests (SKIP_TESTS=1)"; \
|
|
fi && \
|
|
APP_VERSION="${APP_VERSION}" npm run build
|
|
|
|
# ==============================================================================
|
|
# Stage 2: Go Backend Lint, Unit Tests & Binary Build (Cached Go module & sqlite layer)
|
|
# ==============================================================================
|
|
FROM golang:1.23-alpine AS backend-builder
|
|
WORKDIR /app
|
|
RUN apk add --no-cache git ca-certificates
|
|
|
|
# Cache Go modules & pre-compile heavy dependencies (modernc.org/sqlite) in a dedicated layer
|
|
COPY go.mod ./
|
|
RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache/go-build \
|
|
go get github.com/go-chi/chi/v5@v5.2.0 \
|
|
github.com/go-chi/cors@v1.2.1 \
|
|
github.com/golang-jwt/jwt/v5@v5.2.1 \
|
|
github.com/gorilla/websocket@v1.5.3 \
|
|
golang.org/x/crypto/bcrypt@v0.31.0 \
|
|
modernc.org/sqlite@v1.34.4 && \
|
|
CGO_ENABLED=0 go build \
|
|
modernc.org/sqlite \
|
|
github.com/go-chi/chi/v5 \
|
|
github.com/go-chi/cors \
|
|
github.com/golang-jwt/jwt/v5 \
|
|
github.com/gorilla/websocket \
|
|
golang.org/x/crypto/bcrypt
|
|
|
|
# Copy application source & compiled frontend SPA assets for go:embed
|
|
COPY cmd/ ./cmd/
|
|
COPY internal/ ./internal/
|
|
COPY --from=frontend-builder /app/frontend/dist ./cmd/server/dist
|
|
|
|
ARG SKIP_TESTS=0
|
|
# Run go mod tidy, static analysis (go vet), unit tests (go test), and compile final binary
|
|
RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache/go-build \
|
|
go mod tidy && \
|
|
if [ "$SKIP_TESTS" != "1" ]; then \
|
|
CGO_ENABLED=0 go vet ./... && \
|
|
CGO_ENABLED=0 go test -v ./...; \
|
|
else \
|
|
echo "Skipping backend tests (SKIP_TESTS=1)"; \
|
|
fi && \
|
|
CGO_ENABLED=0 go build -ldflags="-s -w" -o /app/mindsift ./cmd/server
|
|
|
|
# ==============================================================================
|
|
# Stage 3: Minimal Production Runtime (< 35 MB)
|
|
# ==============================================================================
|
|
FROM alpine:3.21
|
|
# The code state the image was built from (CI: decides whether a later build may skip the tests)
|
|
ARG GIT_SHA=""
|
|
ARG GIT_TREE=""
|
|
LABEL org.opencontainers.image.revision="${GIT_SHA}" io.mindsift.tree="${GIT_TREE}"
|
|
RUN apk add --no-cache ca-certificates tzdata && \
|
|
mkdir -p /data /tmp && \
|
|
chmod 1777 /tmp
|
|
|
|
WORKDIR /app
|
|
COPY --from=backend-builder /app/mindsift /app/mindsift
|
|
|
|
ENV PORT=8080
|
|
ENV DATA_DIR=/data
|
|
VOLUME ["/data"]
|
|
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["/app/mindsift"]
|