miniflux/packaging/docker/distroless/Dockerfile

FROM golang:latest AS build
ENV CGO_ENABLED=0
ADD . /go/src/app
WORKDIR /go/src/app
RUN go build \
    -o miniflux \
    -ldflags="-s -w -X 'miniflux.app/v2/internal/version.Version=`git describe --tags --abbrev=0`' -X 'miniflux.app/v2/internal/version.Commit=`git rev-parse --short HEAD`' -X 'miniflux.app/v2/internal/version.BuildDate=`date +%FT%T%z`'" \
    main.go

FROM gcr.io/distroless/base:nonroot

LABEL org.opencontainers.image.title=Miniflux
LABEL org.opencontainers.image.description="Miniflux is a minimalist and opinionated feed reader"
LABEL org.opencontainers.image.vendor="Frédéric Guillot"
LABEL org.opencontainers.image.licenses=Apache-2.0
LABEL org.opencontainers.image.url=https://miniflux.app
LABEL org.opencontainers.image.source=https://github.com/miniflux/v2
LABEL org.opencontainers.image.documentation=https://miniflux.app/docs/

EXPOSE 8080
ENV LISTEN_ADDR 0.0.0.0:8080
COPY --from=build /go/src/app/miniflux /usr/bin/miniflux
CMD ["/usr/bin/miniflux"]
Add distroless Docker image variant 2022-03-16 06:39:16 +01:00			`FROM golang:latest AS build`
Disable CGO when building Docker images 2023-06-23 05:54:30 +02:00			`ENV CGO_ENABLED=0`
Build multi-platform images with Docker Buildx 2020-10-19 00:00:10 +02:00			`ADD . /go/src/app`
			`WORKDIR /go/src/app`
			`RUN go build \`
			`-o miniflux \`
Move internal packages to an internal folder For reference: https://go.dev/doc/go1.4#internalpackages 2023-08-11 04:46:45 +02:00			-ldflags="-s -w -X 'miniflux.app/v2/internal/version.Version=`git describe --tags --abbrev=0`' -X 'miniflux.app/v2/internal/version.Commit=`git rev-parse --short HEAD`' -X 'miniflux.app/v2/internal/version.BuildDate=`date +%FT%T%z`'" \
Build multi-platform images with Docker Buildx 2020-10-19 00:00:10 +02:00			`main.go`

Fix non-numeric UID This patch adjusts the distroless image to use the predefined non-root UID, which uses explicit UID definitions. This allows orchestrators like Kubernetes to validate non-zero UIDs directly by checking the Image metadata. The previous setup without an explicit `runAsUser` in the securityContext would produce the following error when enabling `runAsNonRoot`: ``` Error: container has runAsNonRoot and image has non-numeric user (nonroot), cannot verify user is non-root (pod: "miniflux-97cc5955f-pt7vf_miniflux(d1c56d29-ea0a-407c-b3f3-9821fbd7ee61)", container: miniflux) ``` 2024-02-05 01:11:53 +01:00			`FROM gcr.io/distroless/base:nonroot`
Add Open Containers annotations to Docker image 2021-02-14 01:27:23 +01:00
			`LABEL org.opencontainers.image.title=Miniflux`
			`LABEL org.opencontainers.image.description="Miniflux is a minimalist and opinionated feed reader"`
			`LABEL org.opencontainers.image.vendor="Frédéric Guillot"`
			`LABEL org.opencontainers.image.licenses=Apache-2.0`
			`LABEL org.opencontainers.image.url=https://miniflux.app`
			`LABEL org.opencontainers.image.source=https://github.com/miniflux/v2`
			`LABEL org.opencontainers.image.documentation=https://miniflux.app/docs/`

Reinstate EXPOSE instruction This ensures that the relevant port is published when using `docker run -P`, Traefik's Docker integration etc 2020-11-04 18:48:24 +01:00			`EXPOSE 8080`
Build multi-platform images with Docker Buildx 2020-10-19 00:00:10 +02:00			`ENV LISTEN_ADDR 0.0.0.0:8080`
			`COPY --from=build /go/src/app/miniflux /usr/bin/miniflux`
			`CMD ["/usr/bin/miniflux"]`