Files
wehub-resource-sync 161ef94b4f
Check engine pin consistency / Dockerfile / CI pin consistency (push) Successful in 8s
Sirius CI/CD Pipeline / Detect Changes (push) Successful in 23s
Validate Docker Configuration / Validate Docker Compose Configuration (push) Successful in 47s
Sirius CI/CD Pipeline / Build API (${{ matrix.platform }}) (push) Has been cancelled
Sirius CI/CD Pipeline / Build UI (${{ matrix.platform }}) (push) Has been cancelled
Sirius CI/CD Pipeline / Merge Engine Manifest (push) Has been cancelled
Sirius CI/CD Pipeline / Merge API Manifest (push) Has been cancelled
Sirius CI/CD Pipeline / Merge UI Manifest (push) Has been cancelled
Sirius CI/CD Pipeline / Build Engine (${{ matrix.platform }}) (push) Has been cancelled
Sirius CI/CD Pipeline / Build Infra (${{ matrix.service }}, ${{ matrix.platform }}) (push) Has been cancelled
Sirius CI/CD Pipeline / Merge Infra Manifest (sirius-postgres) (push) Has been cancelled
Sirius CI/CD Pipeline / Merge Infra Manifest (sirius-rabbitmq) (push) Has been cancelled
Sirius CI/CD Pipeline / Merge Infra Manifest (sirius-valkey) (push) Has been cancelled
Sirius CI/CD Pipeline / Integration Test (push) Has been cancelled
Sirius CI/CD Pipeline / Public Stack Contract (push) Has been cancelled
Sirius CI/CD Pipeline / Dispatch Demo Deployment (sirius-demo branch) (push) Has been cancelled
Sirius CI/CD Pipeline / Dispatch Demo Canary (main branch) (push) Has been cancelled
Sirius CI/CD Pipeline / Guard Registry Namespace (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:32:25 +08:00

104 lines
4.3 KiB
Docker

# Multi-stage Dockerfile for sirius-api
#
# system-monitor and administrator are built in this file (no external GHCR base image).
# ─────────────────────────────────────────────────────────────────────────────
# Utility binaries: system-monitor + administrator
# ─────────────────────────────────────────────────────────────────────────────
FROM golang:1.24-alpine AS utility-go-binaries
RUN apk add --no-cache git ca-certificates tzdata
RUN git clone https://github.com/SiriusScan/app-system-monitor.git /tmp/system-monitor && \
cd /tmp/system-monitor && \
go mod download && \
CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o /usr/local/bin/system-monitor main.go && \
rm -rf /tmp/system-monitor
RUN git clone https://github.com/SiriusScan/app-administrator.git /tmp/administrator && \
cd /tmp/administrator && \
go mod download && \
CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o /usr/local/bin/administrator main.go && \
rm -rf /tmp/administrator
# ─────────────────────────────────────────────────────────────────────────────
# Development stage: for local development with volume mounts
# ─────────────────────────────────────────────────────────────────────────────
FROM golang:1.24-alpine AS development
RUN apk add --no-cache \
git \
ca-certificates \
tzdata
RUN addgroup -g 1001 appgroup && \
adduser -u 1001 -G appgroup -s /bin/sh -D appuser
WORKDIR /api
RUN chown -R appuser:appgroup /api
COPY start-dev.sh /start-dev.sh
RUN sed -i 's/\r$//' /start-dev.sh && chmod +x /start-dev.sh
USER appuser
EXPOSE 9001
CMD ["/start-dev.sh"]
# ─────────────────────────────────────────────────────────────────────────────
# Builder stage: compile the API binary
# ─────────────────────────────────────────────────────────────────────────────
FROM golang:1.24-alpine AS builder
WORKDIR /app
RUN apk add --no-cache \
git \
ca-certificates \
tzdata
# Copy source code
COPY . .
# Use production go.mod and go.sum (without local replace directive)
RUN cp go.mod.prod go.mod && cp go.sum.prod go.sum
RUN go mod download
RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o sirius-api main.go
# ─────────────────────────────────────────────────────────────────────────────
# Runtime stage
# ─────────────────────────────────────────────────────────────────────────────
FROM alpine:latest AS runner
RUN apk --no-cache add \
ca-certificates \
tzdata \
curl
RUN addgroup -g 1001 appgroup && \
adduser -u 1001 -G appgroup -s /bin/sh -D appuser
WORKDIR /app
RUN mkdir -p /system-monitor
# Copy API binary from builder stage
COPY --from=builder /app/sirius-api /app/sirius-api
COPY --from=utility-go-binaries /usr/local/bin/system-monitor /system-monitor/system-monitor
COPY --from=utility-go-binaries /usr/local/bin/administrator /app/administrator
RUN chmod +x /system-monitor/system-monitor /app/administrator /app/sirius-api
RUN chown -R appuser:appgroup /app /system-monitor
USER appuser
EXPOSE 9001
CMD ["sh", "-c", "CONTAINER_NAME=sirius-api /system-monitor/system-monitor >> /tmp/system-monitor.log 2>&1 & CONTAINER_NAME=sirius-api /app/administrator >> /tmp/administrator.log 2>&1 & /app/sirius-api"]