|
1 | | -# syntax = docker/dockerfile:1 |
| 1 | +# syntax=docker/dockerfile:1 |
| 2 | +# check=error=true |
2 | 3 |
|
3 | | -# Make sure RUBY_VERSION matches the Ruby version in .ruby-version and Gemfile |
4 | | -ARG RUBY_VERSION=3.1.4 |
5 | | -FROM ruby:$RUBY_VERSION-slim as base |
| 4 | +# Make sure RUBY_VERSION matches the Ruby version in .ruby-version |
| 5 | +ARG RUBY_VERSION=3.4.8 |
| 6 | +FROM ruby:$RUBY_VERSION-slim AS base |
6 | 7 |
|
7 | 8 | # Rails app lives here |
8 | 9 | WORKDIR /rails |
9 | 10 |
|
10 | | -# Set production environment |
11 | | -ENV RAILS_ENV="production" \ |
12 | | - BUNDLE_WITHOUT="development:test" \ |
13 | | - BUNDLE_DEPLOYMENT="1" |
14 | | - |
15 | 11 | # Update gems and bundler |
16 | 12 | RUN gem update --system --no-document && \ |
17 | 13 | gem install -N bundler |
18 | 14 |
|
19 | | -# Install packages needed to install nodejs |
| 15 | +# Install base packages |
20 | 16 | RUN apt-get update -qq && \ |
21 | | - apt-get install --no-install-recommends -y curl && \ |
| 17 | + apt-get install --no-install-recommends -y curl libjemalloc2 postgresql-client && \ |
22 | 18 | rm -rf /var/lib/apt/lists /var/cache/apt/archives |
23 | 19 |
|
24 | | -# Install Node.js |
25 | | -ARG NODE_VERSION=18.17.0 |
26 | | -ENV PATH=/usr/local/node/bin:$PATH |
27 | | -RUN curl -sL https://github.com/nodenv/node-build/archive/master.tar.gz | tar xz -C /tmp/ && \ |
28 | | - /tmp/node-build-master/bin/node-build "${NODE_VERSION}" /usr/local/node && \ |
29 | | - rm -rf /tmp/node-build-master |
| 20 | +# Set production environment |
| 21 | +ENV BUNDLE_DEPLOYMENT="1" \ |
| 22 | + BUNDLE_PATH="/usr/local/bundle" \ |
| 23 | + BUNDLE_WITHOUT="development:test" \ |
| 24 | + RAILS_ENV="production" |
30 | 25 |
|
31 | 26 |
|
32 | 27 | # Throw-away build stage to reduce size of final image |
33 | | -FROM base as build |
| 28 | +FROM base AS build |
34 | 29 |
|
35 | | -# Install packages needed to build gems |
| 30 | +# Install packages needed to build gems and node modules |
36 | 31 | RUN apt-get update -qq && \ |
37 | | - apt-get install --no-install-recommends -y build-essential libpq-dev |
| 32 | + apt-get install --no-install-recommends -y build-essential libpq-dev libyaml-dev node-gyp pkg-config python-is-python3 && \ |
| 33 | + rm -rf /var/lib/apt/lists /var/cache/apt/archives |
38 | 34 |
|
39 | | -# Build options |
40 | | -ENV PATH="/usr/local/node/bin:$PATH" |
| 35 | +# Install Node.js |
| 36 | +ARG NODE_VERSION=24.14.0 |
| 37 | +ENV PATH=/usr/local/node/bin:$PATH |
| 38 | +RUN curl -sL https://github.com/nodenv/node-build/archive/master.tar.gz | tar xz -C /tmp/ && \ |
| 39 | + /tmp/node-build-master/bin/node-build "${NODE_VERSION}" /usr/local/node && \ |
| 40 | + rm -rf /tmp/node-build-master |
41 | 41 |
|
42 | 42 | # Install application gems |
43 | | -COPY --link Gemfile Gemfile.lock ./ |
| 43 | +COPY Gemfile Gemfile.lock ./ |
44 | 44 | RUN bundle install && \ |
45 | | - bundle exec bootsnap precompile --gemfile && \ |
46 | | - rm -rf ~/.bundle/ $BUNDLE_PATH/ruby/*/cache $BUNDLE_PATH/ruby/*/bundler/gems/*/.git |
| 45 | + rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \ |
| 46 | + bundle exec bootsnap precompile --gemfile |
| 47 | + |
| 48 | +# Install node modules |
| 49 | +COPY package.json package-lock.json ./ |
| 50 | +RUN npm install |
| 51 | + |
| 52 | +# Build the bookmarklet |
| 53 | +COPY config/esbuild.js config/ |
| 54 | +COPY app/javascript/bookmarklet/ app/javascript/bookmarklet/ |
| 55 | +RUN npm run build:bookmarklet |
47 | 56 |
|
48 | 57 | # Copy application code |
49 | | -COPY --link . . |
| 58 | +COPY . . |
50 | 59 |
|
51 | 60 | # Precompile bootsnap code for faster boot times |
52 | 61 | RUN bundle exec bootsnap precompile app/ lib/ |
53 | 62 |
|
54 | 63 | # Precompiling assets for production without requiring secret RAILS_MASTER_KEY |
55 | | -RUN SECRET_KEY_BASE=DUMMY ./bin/rails assets:precompile |
| 64 | +RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile |
56 | 65 |
|
57 | 66 |
|
58 | 67 | # Final stage for app image |
59 | 68 | FROM base |
60 | 69 |
|
61 | | -# Install packages needed for deployment |
62 | | -RUN apt-get update -qq && \ |
63 | | - apt-get install --no-install-recommends -y curl postgresql-client && \ |
64 | | - rm -rf /var/lib/apt/lists /var/cache/apt/archives |
65 | 70 |
|
66 | 71 | # Copy built artifacts: gems, application |
67 | | -COPY --from=build /usr/local/bundle /usr/local/bundle |
| 72 | +COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}" |
68 | 73 | COPY --from=build /rails /rails |
69 | 74 |
|
70 | 75 | # Run and own only the runtime files as a non-root user for security |
71 | | -RUN useradd rails --create-home --shell /bin/bash && \ |
72 | | - chown -R rails:rails db log tmp |
73 | | -USER rails:rails |
74 | | - |
75 | | -# Deployment options |
76 | | -ENV RAILS_LOG_TO_STDOUT="1" \ |
77 | | - RAILS_SERVE_STATIC_FILES="true" |
| 76 | +RUN groupadd --system --gid 1000 rails && \ |
| 77 | + useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash && \ |
| 78 | + chown -R 1000:1000 db log tmp |
| 79 | +USER 1000:1000 |
78 | 80 |
|
79 | 81 | # Entrypoint prepares the database. |
80 | 82 | ENTRYPOINT ["/rails/bin/docker-entrypoint"] |
|
0 commit comments