# Part 1: a builder image with the dependencies to actually build the
# project. Gigabytes on disk.
FROM rust:slim-bookworm AS builder
WORKDIR /
RUN apt update
RUN apt-get install -y \
# ayb requirements
libssl-dev \
# nsjail requirements
autoconf \
bison \
flex \
gcc \
g++ \
git \
libprotobuf-dev \
libnl-route-3-dev \
libtool \
make \
pkg-config \
protobuf-compiler
RUN git clone https://github.com/google/nsjail.git nsjail-checkout && cd nsjail-checkout && make && mv nsjail .. && cd .. && rm -rf nsjail-checkout
COPY . /ayb
RUN cd ayb && cargo build --release
# Part 2: the image with the binaries built by the builder and no
# unnecessary dependencies or build artifacts. Low hundreds of
# megabytes on disk.
FROM debian:bookworm-slim
RUN apt update
RUN apt-get install -y libssl-dev
COPY --from=builder /ayb/target/release/ayb /bin
COPY --from=builder /ayb/target/release/ayb_isolated_runner /bin
COPY --from=builder /nsjail /bin
EXPOSE 5433
CMD ["/bin/ayb", "server"]