Add CA certs to scratch runtime; tested and actually works

This commit is contained in:
gigirassy
2025-11-01 02:50:21 +01:00
parent 78c8048000
commit 16030e559b

View File

@@ -1,26 +1,17 @@
FROM --platform=$BUILDPLATFORM golang:alpine AS build
ARG TARGETARCH
WORKDIR /src
RUN apk --no-cache add git
RUN apk --no-cache add git ca-certificates
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN go run github.com/swaggo/swag/cmd/swag@latest init --parseDependency
ENV CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH}
RUN go build -ldflags="-s -w" -o /src/mozhi ./ # adjust path if needed
RUN go build -ldflags="-s -w" -o /src/mozhi .
FROM scratch AS runtime
WORKDIR /app
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY --from=build /src/mozhi /app/mozhi
EXPOSE 3000
ENTRYPOINT ["/app/mozhi", "serve"]