Public Access
73 lines
1.9 KiB
Docker
73 lines
1.9 KiB
Docker
# Build stage
|
|
FROM rust:1.85-slim as builder
|
|
|
|
# Install build dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
pkg-config \
|
|
libssl-dev \
|
|
protobuf-compiler \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy manifests
|
|
COPY Cargo.toml Cargo.lock ./
|
|
COPY charybdis-server/Cargo.toml ./charybdis-server/
|
|
COPY plugins/defectdojo/Cargo.toml ./plugins/defectdojo/
|
|
COPY plugins/dependencytrack/Cargo.toml ./plugins/dependencytrack/
|
|
COPY plugins/keycloak/Cargo.toml ./plugins/keycloak/
|
|
|
|
# Create dummy source files to cache dependencies
|
|
RUN mkdir -p src && \
|
|
echo "fn main() {}" > src/main.rs && \
|
|
mkdir -p charybdis-server/src && \
|
|
echo "fn main() {}" > charybdis-server/src/main.rs && \
|
|
mkdir -p plugins/defectdojo/src && \
|
|
echo "fn main() {}" > plugins/defectdojo/src/lib.rs && \
|
|
mkdir -p plugins/dependencytrack/src && \
|
|
echo "fn main() {}" > plugins/dependencytrack/src/lib.rs && \
|
|
mkdir -p plugins/keycloak/src && \
|
|
echo "fn main() {}" > plugins/keycloak/src/lib.rs
|
|
|
|
# Build dependencies (cached layer)
|
|
RUN cargo build --release && \
|
|
rm -rf src charybdis-server/src plugins/defectdojo/src plugins/dependencytrack/src plugins/keycloak/src
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build real application
|
|
RUN cargo build --release --bin charybdis
|
|
|
|
# Runtime stage
|
|
FROM debian:bookworm-slim
|
|
|
|
# Install runtime dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
ca-certificates \
|
|
libssl3 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /app/target/release/charybdis /usr/local/bin/charybdis
|
|
|
|
# Copy config template
|
|
COPY config.toml.example /app/config.toml.example
|
|
|
|
# Create non-root user
|
|
RUN useradd -m -u 1000 charybdis && \
|
|
chown -R charybdis:charybdis /app
|
|
|
|
USER charybdis
|
|
|
|
# Expose ports
|
|
EXPOSE 50051 8080
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
|
|
CMD test -f /tmp/charybdis.pid || exit 1
|
|
|
|
ENTRYPOINT ["charybdis"]
|