invar-cli 1.0.0

The Unchanging Key for Changing Data - Generate immutable structural state roots for cryptographic cache keys
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

# Minimal runtime image for pre-built binaries
# Used by the release workflow with pre-compiled Linux binary
FROM debian:bookworm-slim

ARG BINARY_PATH=invar

# Install CA certificates for HTTPS support (if needed in future)
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

# Create non-root user
RUN useradd -m -u 1000 invar

# Copy pre-built binary
COPY ${BINARY_PATH} /usr/local/bin/invar

# Ensure binary is executable
RUN chmod +x /usr/local/bin/invar

# Switch to non-root user
USER invar
WORKDIR /data

# Default entrypoint
ENTRYPOINT ["invar"]
CMD ["--help"]