invar-cli 1.0.0

The Unchanging Key for Changing Data - Generate immutable structural state roots for cryptographic cache keys
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

# Build stage
FROM rust:slim-bookworm AS builder

WORKDIR /build

# Install build dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    pkg-config \
    && rm -rf /var/lib/apt/lists/*

# Copy everything and build
COPY Cargo.toml Cargo.lock ./
COPY src ./src

# Build the release binary
RUN cargo build --release --locked

# Verify the binary works
RUN ./target/release/invar --version

# Runtime stage - minimal image
FROM debian:bookworm-slim

# Install CA certificates for HTTPS support (if needed in future)
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

# Create non-root user
RUN useradd -m -u 1000 invar

# Copy binary from builder
COPY --from=builder /build/target/release/invar /usr/local/bin/invar

# Ensure binary is executable
RUN chmod +x /usr/local/bin/invar

# Switch to non-root user
USER invar
WORKDIR /data

# Default entrypoint
ENTRYPOINT ["invar"]
CMD ["--help"]