feat(videochat): use distroless approach

elskow · Oct 21, 2024 · 7582c0a · 7582c0a
1 parent 7502d0f
commit 7582c0a
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 22 deletions.
diff --git a/videochat-cp/.dockerignore b/videochat-cp/.dockerignore
@@ -0,0 +1,6 @@
+.git
+node_modules
+dist
+Dockerfile
+docker-compose.yaml
+*.md
diff --git a/videochat-cp/Dockerfile b/videochat-cp/Dockerfile
@@ -8,23 +8,15 @@ COPY go.mod go.sum ./
 RUN go mod download
 
 COPY . .
-
 RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o main .
 
-FROM alpine:3.18
-
-RUN adduser -D appuser
+FROM gcr.io/distroless/static
 
 WORKDIR /app
 
 COPY --from=builder /app/main .
 COPY config.yaml .
-COPY scripts/entrypoint.sh .
-
-RUN chown -R appuser:appuser /app && \
-    chmod +x entrypoint.sh
 
-USER appuser
+USER nonroot:nonroot
 
-ENTRYPOINT ["./entrypoint.sh"]
-CMD ["./main", "--config", "config.yaml"]
+CMD ["./main", "--config", "config.yaml"]
diff --git a/videochat-cp/scripts/entrypoint.sh b/videochat-cp/scripts/entrypoint.sh