-
-
Notifications
You must be signed in to change notification settings - Fork 47
/
Dockerfile
76 lines (57 loc) · 2.78 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
# CLI
FROM getsentry/sentry-cli:2 AS sentry-cli
# Image with cargo-chef as base image to our builder
FROM rust:slim-bookworm AS symbolicator-chef
WORKDIR /work
RUN cargo install cargo-chef --locked
# Image that generates cargo-check recipe
FROM symbolicator-chef AS symbolicator-planner
COPY . .
RUN cargo chef prepare --recipe-path recipe.json
# Image that builds the final symbolicator
FROM symbolicator-chef AS symbolicator-build
RUN apt-get update \
&& apt-get upgrade -y \
&& apt-get install -y --no-install-recommends build-essential ca-certificates curl libssl-dev pkg-config git zip clang mold \
# below required for sentry-native
cmake clang libcurl4-openssl-dev \
&& rm -rf /var/lib/apt/lists/*
ARG SYMBOLICATOR_FEATURES=symbolicator-crash
ENV SYMBOLICATOR_FEATURES=${SYMBOLICATOR_FEATURES}
ENV RUSTFLAGS="-C linker=clang -C link-arg=-fuse-ld=/usr/bin/mold"
COPY --from=symbolicator-planner /work/recipe.json recipe.json
# Build only the dependencies identified in the `symbolicator-planner` image
RUN cargo chef cook --profile release-lto --features=${SYMBOLICATOR_FEATURES} --recipe-path recipe.json
COPY . .
RUN git update-index --skip-worktree $(git status | grep deleted | awk '{print $2}')
RUN cargo build -p symbolicator --profile release-lto --features=${SYMBOLICATOR_FEATURES}
RUN cp target/release-lto/symbolicator target/release-lto/symbolicator.debug \
&& objcopy --strip-debug --strip-unneeded target/release-lto/symbolicator \
&& objcopy --add-gnu-debuglink target/release-lto/symbolicator target/release-lto/symbolicator.debug \
&& cp ./target/release-lto/symbolicator /usr/local/bin \
&& zip /opt/symbolicator-debug.zip target/release-lto/symbolicator.debug
COPY --from=sentry-cli /bin/sentry-cli /bin/sentry-cli
RUN sentry-cli --version \
&& SOURCE_BUNDLE="$(sentry-cli difutil bundle-sources ./target/release-lto/symbolicator.debug)" \
&& mv "$SOURCE_BUNDLE" /opt/symbolicator.src.zip
#############################################
# Copy the compiled binary to a clean image #
#############################################
FROM debian:bookworm-slim
RUN apt-get update \
&& apt-get upgrade -y \
&& apt-get install -y --no-install-recommends openssl ca-certificates gosu curl cabextract \
&& rm -rf /var/lib/apt/lists/*
ENV \
SYMBOLICATOR_UID=10021 \
SYMBOLICATOR_GID=10021
# Create a new user and group with fixed uid/gid
RUN groupadd --system symbolicator --gid $SYMBOLICATOR_GID \
&& useradd --system --gid symbolicator --uid $SYMBOLICATOR_UID symbolicator
VOLUME ["/data"]
RUN mkdir -p /etc/symbolicator /data && \
chown symbolicator:symbolicator /etc/symbolicator /data
EXPOSE 3021
COPY --from=symbolicator-build /usr/local/bin/symbolicator /bin
COPY ./docker-entrypoint.sh /
ENTRYPOINT ["/bin/bash", "/docker-entrypoint.sh"]