97 lines
2.2 KiB
Docker
97 lines
2.2 KiB
Docker
# Multi-stage build yang lebih optimal
|
|
# FROM golang:1.25-alpine AS build
|
|
|
|
# # Install build dependencies
|
|
# RUN apk add --no-cache git ca-certificates tzdata
|
|
|
|
# WORKDIR /build
|
|
|
|
# # Cache go mod dependencies
|
|
# COPY go.mod go.sum ./
|
|
# RUN go mod download && go mod verify
|
|
|
|
# # Copy source code
|
|
# COPY . .
|
|
|
|
# # Build dengan optimasi
|
|
# RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
|
|
# go build -a -installsuffix cgo \
|
|
# -ldflags='-w -s -extldflags "-static"' \
|
|
# -o main cmd/api/main.go
|
|
|
|
# # Final stage - distroless untuk keamanan
|
|
# FROM gcr.io/distroless/static:nonroot
|
|
|
|
# # Copy timezone data
|
|
# COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo
|
|
|
|
# # Copy binary
|
|
# COPY --from=build /build/main /app/main
|
|
|
|
# # Use non-root user
|
|
# USER nonroot:nonroot
|
|
|
|
# # Health check
|
|
# HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
# CMD ["/app/main", "-health"] || exit 1
|
|
|
|
# EXPOSE 8080
|
|
|
|
# ENTRYPOINT ["/app/main"]
|
|
|
|
# syntax=docker/dockerfile:1
|
|
|
|
# Build stage
|
|
FROM golang:1.25-alpine AS build
|
|
|
|
RUN apk add --no-cache \
|
|
git \
|
|
ca-certificates \
|
|
tzdata
|
|
|
|
WORKDIR /build
|
|
|
|
# Cache dependency layer
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download && go mod verify
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build seluruh package, bukan hanya satu file main.go
|
|
RUN CGO_ENABLED=0 \
|
|
GOOS=linux \
|
|
GOARCH=amd64 \
|
|
go build \
|
|
-trimpath \
|
|
-ldflags="-s -w" \
|
|
-o /out/main \
|
|
./cmd/api
|
|
|
|
# Final stage - menggunakan tag :debug-nonroot agar memiliki akses shell (BusyBox)
|
|
FROM gcr.io/distroless/static:debug-nonroot
|
|
|
|
WORKDIR /app
|
|
|
|
ENV TZ="Asia/Jakarta"
|
|
# Tambahkan /busybox ke dalam PATH agar command 'sh' bisa langsung dijalankan
|
|
ENV PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/busybox"
|
|
|
|
# Timezone dan CA certificates
|
|
COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo
|
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt \
|
|
/etc/ssl/certs/ca-certificates.crt
|
|
|
|
# Application binary
|
|
COPY --from=build /out/main /app/main
|
|
|
|
# Pastikan folder logs dan data ada agar aplikasi tidak error saat menulis (opsional tapi disarankan)
|
|
# COPY --from=build --chown=nonroot:nonroot /build/logs /app/logs
|
|
# COPY --from=build --chown=nonroot:nonroot /build/data /app/data
|
|
|
|
# Use non-root user
|
|
USER nonroot:nonroot
|
|
|
|
EXPOSE 8198
|
|
|
|
ENTRYPOINT ["/app/main"] |