mrhid6
ee1f9f3b32
shared/ is extracted to gitea.hostxtra.co.uk/vantage/vantage-shared and pinned at v0.1.0 by server, agent, admin, sitesvc and vantagectl. The replace directives and the ./shared entry in go.work are gone. Every Go build now needs a credential for the private module: CI writes a netrc per job from REGISTRY_USER + RELEASE_TOKEN and sets GOPRIVATE, and the four Go Dockerfiles take it as a BuildKit secret rather than a build arg, which would survive in the builder layer's history. RELEASE_TOKEN needs read access to the vantage org. admin, sitesvc and vantagectl now build from their own directory; only server still needs the repository root, for default_steps/. The rebuild triggers in server-deploy.yml lose their shared/ patterns, since a service now moves when its own go.mod pin does.
37 lines
1.1 KiB
Docker
37 lines
1.1 KiB
Docker
# Context is sitesvc/ itself. It used to be the repository root, so that
|
|
# shared/ could be copied in beside it; shared is now the private module
|
|
# gitea.hostxtra.co.uk/vantage/vantage-shared, fetched like any other
|
|
# dependency. The credential for it arrives as a BuildKit secret rather than a
|
|
# build arg, which would be baked into this stage's layer history.
|
|
FROM golang:1.26-alpine AS builder
|
|
|
|
WORKDIR /src
|
|
|
|
ENV GOPRIVATE=gitea.hostxtra.co.uk/*
|
|
RUN apk add --no-cache git
|
|
|
|
COPY go.mod go.sum ./
|
|
RUN --mount=type=secret,id=netrc,target=/root/.netrc \
|
|
go mod download
|
|
|
|
COPY . .
|
|
|
|
RUN --mount=type=secret,id=netrc,target=/root/.netrc \
|
|
CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /out/sitesvc ./cmd
|
|
|
|
FROM alpine:3.20 AS runner
|
|
|
|
# Needed to verify the SMTP server's TLS certificate.
|
|
RUN apk add --no-cache ca-certificates && \
|
|
addgroup --system --gid 1001 sitesvc && \
|
|
adduser --system --uid 1001 --ingroup sitesvc sitesvc
|
|
|
|
COPY --from=builder /out/sitesvc /usr/local/bin/sitesvc
|
|
|
|
USER sitesvc
|
|
|
|
EXPOSE 8082
|
|
ENV PORT=8082
|
|
|
|
CMD ["/usr/local/bin/sitesvc"]
|