Story Crater Bot
9c01076092
Forgejo registry unreachable from cluster nodes (WireGuard overlay vs LAN network isolation, plus host-to-ClusterIP routing gaps). Move to public GitHub dependency and GHCR image hosting to remove the private-network dependency entirely.
13 lines
421 B
Docker
13 lines
421 B
Docker
FROM golang:1.26 AS build
|
|
WORKDIR /src
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
COPY . .
|
|
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -trimpath -o /out/kmsvc-server ./cmd/server
|
|
|
|
FROM gcr.io/distroless/static-debian12:nonroot
|
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
COPY --from=build /out/kmsvc-server /kmsvc-server
|
|
USER nonroot:nonroot
|
|
ENTRYPOINT ["/kmsvc-server"]
|