# syntax=docker/dockerfile:1.4 # This needs to be bullseye-slim because the Ruby image is built on bullseye-slim ARG NODE_IMAGE=node:18.16-bullseye-slim ARG RUBY_IMAGE=ghcr.io/moritzheiber/ruby-jemalloc:3.2.2-slim FROM ${RUBY_IMAGE} as ruby # build-base FROM ${NODE_IMAGE} as build-base COPY --link --from=ruby /opt/ruby /opt/ruby ENV DEBIAN_FRONTEND="noninteractive" \ PATH="${PATH}:/opt/ruby/bin" SHELL ["/bin/bash", "-o", "pipefail", "-c"] WORKDIR /opt/mastodon # hadolint ignore=DL3008 RUN --mount=type=cache,id=apt,target=/var/cache/apt,sharing=private \ set -eux && \ rm -f /etc/apt/apt.conf.d/docker-clean && \ echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache && \ apt-get update && \ apt-get install -y --no-install-recommends \ build-essential \ ca-certificates \ git \ libgdbm-dev \ libgmp-dev \ libicu-dev \ libidn11-dev \ libjemalloc-dev \ libpq-dev \ libreadline8 \ libssl-dev \ libyaml-0-2 \ python3 \ shared-mime-info \ zlib1g-dev COPY --link .yarn/releases/ /opt/mastodon/.yarn/releases/ COPY --link Gemfile* package.json yarn.lock .yarnrc.yml /opt/mastodon/ ENV NODE_OPTIONS=--openssl-legacy-provider \ YARN_GLOBAL_FOLDER=/opt/yarn \ YARN_ENABLE_GLOBAL_CACHE=1 RUN --mount=type=cache,id=bundle,target=/opt/bundle/cache,sharing=private \ --mount=type=cache,id=yarn,target=/opt/yarn/cache,sharing=private \ set -eux && \ bundle config set cache_path /opt/bundle/cache && \ bundle config set silence_root_warning 'true' && \ bundle cache --no-install && \ bundle config set --local deployment 'true' && \ bundle install --local -j"$(nproc)" && \ yarn install --immutable # Precompile assets # TODO(kouhai): we're currently patching node_modules because of emoji-mart. # we should integrate our own fork instead. COPY --link . /opt/mastodon # build FROM build-base AS build ENV RAILS_ENV="production" \ NODE_ENV="production" ENV NODE_OPTIONS=--openssl-legacy-provider \ YARN_GLOBAL_FOLDER=/opt/yarn \ YARN_ENABLE_GLOBAL_CACHE=1 ENV OTP_SECRET=precompile_placeholder \ SECRET_KEY_BASE=precompile_placeholder \ RAKE_NO_YARN_INSTALL_HACK=1 # override this at will ENV BOOTSNAP_READONLY=1 RUN --mount=type=cache,id=yarn,target=/opt/yarn/cache,sharing=private \ --mount=type=cache,id=webpacker,target=/opt/webpacker/cache,sharing=private \ set -eux && \ mkdir -p tmp/cache && \ ln -sf /opt/webpacker/cache tmp/cache/webpacker && \ mv ./emoji_data/all.json ./node_modules/emoji-mart/data/all.json && \ yarn install && \ bundle exec rails assets:precompile # final image FROM ${NODE_IMAGE} as output # Use those args to specify your own version flags & suffixes ARG SOURCE_TAG="" ARG MASTODON_VERSION_FLAGS="" ARG MASTODON_VERSION_SUFFIX="" ARG UID="991" ARG GID="991" SHELL ["/bin/bash", "-o", "pipefail", "-c"] ENV DEBIAN_FRONTEND="noninteractive" \ PATH="${PATH}:/opt/ruby/bin:/opt/mastodon/bin" # Ignoring these here since we don't want to pin any versions and the Debian image removes apt-get content after use # hadolint ignore=DL3008,DL3009 RUN --mount=type=cache,id=apt,target=/var/cache/apt,sharing=private \ set -eux && \ rm -f /etc/apt/apt.conf.d/docker-clean && \ echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache && \ apt-get update && \ echo "Etc/UTC" > /etc/localtime && \ groupadd -g "${GID}" mastodon && \ useradd -l -u "$UID" -g "${GID}" -m -d /opt/mastodon mastodon && \ apt-get -y --no-install-recommends install \ ca-certificates \ ffmpeg \ file \ imagemagick \ libicu67 \ libidn11 \ libjemalloc2 \ libpq5 \ libreadline8 \ libssl1.1 \ libyaml-0-2 \ procps \ tini \ tzdata \ wget \ whois \ && ln -s /opt/mastodon /mastodon # Note: no, cleaning here since Debian does this automatically # See the file /etc/apt/apt.conf.d/docker-clean within the Docker image's filesystem COPY --link --from=ruby /opt/ruby /opt/ruby COPY --link --chown=mastodon:mastodon --from=build /opt/mastodon /opt/mastodon ENV RAILS_ENV="production" \ NODE_ENV="production" \ RAILS_SERVE_STATIC_FILES="true" \ BIND="0.0.0.0" \ SOURCE_TAG="${SOURCE_TAG}" \ MASTODON_VERSION_FLAGS="${MASTODON_VERSION_FLAGS}" \ MASTODON_VERSION_SUFFIX="${MASTODON_VERSION_SUFFIX}" # override this at will ENV BOOTSNAP_READONLY=1 # Set the run user USER mastodon WORKDIR /opt/mastodon # Set the work dir and the container entry point ENTRYPOINT ["/usr/bin/tini", "--"] EXPOSE 3000 4000