proofmode 0.8.0

Capture, share, and preserve verifiable photos and videos
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

# Multi-stage build for optimized image size
# Build stage
FROM --platform=$BUILDPLATFORM rust:slim AS builder

# Install build dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    pkg-config \
    libssl-dev \
    ca-certificates \
    perl \
    make \
    clang \
    llvm \
    nettle-dev \
    && rm -rf /var/lib/apt/lists/*

# Create app directory
WORKDIR /app

# Copy source code and manifests
COPY Cargo.toml Cargo.lock ./
COPY src ./src

# Build for release
RUN cargo build --release --bin proofmode

# Runtime stage
FROM debian:bookworm-slim

# Install runtime dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    libssl3 \
    && rm -rf /var/lib/apt/lists/* \
    && useradd -m -u 1000 -s /bin/bash proofmode

# Copy binary from builder
COPY --from=builder /app/target/release/proofmode /usr/local/bin/proofmode

# Create directories for proofmode
RUN mkdir -p /app/input /app/output /app/config && \
    chown -R proofmode:proofmode /app

# Copy entrypoint script
COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

# Environment variables
ENV PROOFMODE_INPUT_DIR=/app/input \
    PROOFMODE_OUTPUT_DIR=/app/output \
    PROOFMODE_CONFIG_DIR=/app/config \
    RUST_LOG=info

# Switch to non-root user
USER proofmode
WORKDIR /app

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
    CMD proofmode --version || exit 1

# Volume mounts
VOLUME ["/app/input", "/app/output", "/app/config"]

# Expose metadata
LABEL org.opencontainers.image.title="ProofMode" \
      org.opencontainers.image.description="Capture, share, and preserve verifiable photos and videos" \
      org.opencontainers.image.url="https://proofmode.org" \
      org.opencontainers.image.source="https://gitlab.com/guardianproject/proofmode/proofmode-rust" \
      org.opencontainers.image.vendor="Guardian Project" \
      org.opencontainers.image.licenses="Apache-2.0"

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD ["--help"]