mirror of
https://github.com/cloudflare/cloudflared.git
synced 2025-05-10 22:36:35 +00:00
789ca6f6f4
* refactor(docker): optimize Dockerfile Remove obsolete upx binary compression Run as unprivileged user * Use go 1.13.3 * Use debian buster distroless
29 lines
646 B
Docker
29 lines
646 B
Docker
# use a builder image for building cloudflare
|
|
FROM golang:1.13.3 as builder
|
|
ENV GO111MODULE=on
|
|
ENV CGO_ENABLED=0
|
|
ENV GOOS=linux
|
|
|
|
WORKDIR /go/src/github.com/cloudflare/cloudflared/
|
|
|
|
# copy our sources into the builder image
|
|
COPY . .
|
|
|
|
# compile cloudflared
|
|
RUN make cloudflared
|
|
|
|
# ---
|
|
|
|
# use a distroless base image with glibc
|
|
FROM gcr.io/distroless/base-debian10:nonroot
|
|
|
|
# copy our compiled binary
|
|
COPY --from=builder --chown=nonroot /go/src/github.com/cloudflare/cloudflared/cloudflared /usr/local/bin/
|
|
|
|
# run as non-privileged user
|
|
USER nonroot
|
|
|
|
# command / entrypoint of container
|
|
ENTRYPOINT ["cloudflared", "--no-autoupdate"]
|
|
CMD ["version"]
|