# syntax=docker/dockerfile:1.4 # This needs to be bullseye-slim because the Ruby image is built on bullseye-slim ARG NODE_VERSION="18.15-bullseye-slim" FROM ghcr.io/moritzheiber/ruby-jemalloc:3.2.1-slim as ruby FROM node:${NODE_VERSION} as build-base COPY --link --from=ruby /opt/ruby /opt/ruby ENV DEBIAN_FRONTEND="noninteractive" \ PATH="${PATH}:/opt/ruby/bin" \ NODE_OPTIONS=--openssl-legacy-provider SHELL ["/bin/bash", "-o", "pipefail", "-c"] WORKDIR /opt/mastodon # hadolint ignore=DL3008 RUN apt-get update && \ apt-get install -y --no-install-recommends build-essential \ ca-certificates \ git \ libicu-dev \ libidn11-dev \ libpq-dev \ libjemalloc-dev \ zlib1g-dev \ libgdbm-dev \ libgmp-dev \ libssl-dev \ libyaml-0-2 \ ca-certificates \ libreadline8 \ python3 \ shared-mime-info COPY --link .yarn/releases/ /opt/mastodon/.yarn/releases/ COPY --link Gemfile* package.json yarn.lock .yarnrc.yml /opt/mastodon/ RUN \ bundle config set --local deployment 'true' && \ bundle config set --local without 'development test' && \ bundle config set silence_root_warning true && \ bundle install -j"$(nproc)" && \ yarn install --immutable && \ yarn cache clean # Precompile assets # TODO(kouhai): we're currently patching node_modules because of emoji-mart. # we should integrate our own fork instead. COPY --link . /opt/mastodon FROM build-base AS build ENV RAILS_ENV="production" \ NODE_ENV="production" ENV OTP_SECRET=precompile_placeholder \ SECRET_KEY_BASE=precompile_placeholder \ RAKE_NO_YARN_INSTALL_HACK=1 RUN mv ./emoji_data/all.json ./node_modules/emoji-mart/data/all.json && \ bundle exec rails assets:precompile FROM node:${NODE_VERSION} ARG UID="991" ARG GID="991" COPY --link --from=ruby /opt/ruby /opt/ruby SHELL ["/bin/bash", "-o", "pipefail", "-c"] ENV DEBIAN_FRONTEND="noninteractive" \ PATH="${PATH}:/opt/ruby/bin:/opt/mastodon/bin" # Ignoreing these here since we don't want to pin any versions and the Debian image removes apt-get content after use # hadolint ignore=DL3008,DL3009 RUN apt-get update && \ echo "Etc/UTC" > /etc/localtime && \ groupadd -g "${GID}" mastodon && \ useradd -l -u "$UID" -g "${GID}" -m -d /opt/mastodon mastodon && \ apt-get -y --no-install-recommends install whois \ wget \ procps \ libssl1.1 \ libpq5 \ imagemagick \ ffmpeg \ libjemalloc2 \ libicu67 \ libidn11 \ libyaml-0-2 \ file \ ca-certificates \ tzdata \ libreadline8 \ tini && \ ln -s /opt/mastodon /mastodon # Note: no, cleaning here since Debian does this automatically # See the file /etc/apt/apt.conf.d/docker-clean within the Docker image's filesystem COPY --link --chown=mastodon:mastodon --from=build /opt/mastodon /opt/mastodon ARG SOURCE_TAG='' ENV RAILS_ENV="production" \ NODE_ENV="production" \ RAILS_SERVE_STATIC_FILES="true" \ BIND="0.0.0.0" \ SOURCE_TAG="${SOURCE_TAG}" # Set the run user USER mastodon WORKDIR /opt/mastodon # Set the work dir and the container entry point ENTRYPOINT ["/usr/bin/tini", "--"] EXPOSE 3000 4000