docker-socket-proxy/arch.dockerfile at master · 11notes/docker-socket-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
# ╔═════════════════════════════════════════════════════╗
# ║                       SETUP                         ║
# ╚═════════════════════════════════════════════════════╝
  # GLOBAL
  ARG APP_UID=1000 \
      APP_GID=1000 \
      BUILD_DIR=/go/socket-proxy
  ARG BUILD_BIN=${BUILD_DIR}/socket-proxy

  # :: FOREIGN IMAGES
  FROM 11notes/distroless AS distroless


# ╔═════════════════════════════════════════════════════╗
# ║                       BUILD                         ║
# ╚═════════════════════════════════════════════════════╝
  # :: SOCKET-PROXY
  FROM 11notes/go:1.25 AS build
  ARG APP_VERSION \
      BUILD_DIR \
      BUILD_BIN

  COPY ./build/ /

  RUN set -ex; \
    cd ${BUILD_DIR}; \
    eleven go build ${BUILD_BIN} main.go; \
    eleven distroless ${BUILD_BIN};

# ╔═════════════════════════════════════════════════════╗
# ║                       IMAGE                         ║
# ╚═════════════════════════════════════════════════════╝
  # :: HEADER
  FROM scratch

  # :: default arguments
    ARG TARGETPLATFORM \
        TARGETOS \
        TARGETARCH \
        TARGETVARIANT \
        APP_IMAGE \
        APP_NAME \
        APP_VERSION \
        APP_ROOT \
        APP_UID \
        APP_GID \
        APP_NO_CACHE

  # :: default environment
    ENV APP_IMAGE=${APP_IMAGE} \
        APP_NAME=${APP_NAME} \
        APP_VERSION=${APP_VERSION} \
        APP_ROOT=${APP_ROOT}

  # :: application specific environment
    ENV SOCKET_PROXY_VOLUME="/run/proxy" \
        SOCKET_PROXY_DOCKER_SOCKET="/run/docker.sock" \
        SOCKET_PROXY_UID=${APP_UID} \
        SOCKET_PROXY_GID=${APP_GID} \
        SOCKET_PROXY_KEEPALIVE="10s" \
        SOCKET_PROXY_TIMEOUT="30s" \
        SOCKET_PROXY_HTTP_LISTEN_IP="0.0.0.0"

  # :: multi-stage
    COPY --from=distroless / /
    COPY --from=build /distroless/ /

# :: PERSISTENT DATA
  HEALTHCHECK --interval=5s --timeout=3s --start-period=5s \
    CMD ["/usr/local/bin/socket-proxy", "--healthcheck"]

# :: EXECUTE
  ENTRYPOINT ["/usr/local/bin/socket-proxy"]