xecute-cli 0.1.8

Project and resource generator for Xecute
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# syntax=docker/dockerfile:1
# Build tools stay in this stage; the final image receives only the stripped binary.
FROM rust:1.98.1-alpine AS build
ARG TARGETARCH
RUN apk add --no-cache gcc musl-dev
WORKDIR /app
COPY Cargo.toml Cargo.lock ./
COPY src ./src
# BuildKit selects the matching static musl target for the requested image architecture.
RUN case "$TARGETARCH" in \
      amd64) target=x86_64-unknown-linux-musl ;; \
      arm64) target=aarch64-unknown-linux-musl ;; \
      *) echo "Unsupported architecture: $TARGETARCH" >&2; exit 1 ;; \
    esac \
    && rustup target add "$target" \
    && cargo build --release --locked --target "$target" \
    && cp "target/$target/release/__PROJECT_NAME__" /app/server

# Minimal non-root runtime with certificate data, without a shell or package manager.
# Configure /health/live and /health/ready probes in your orchestrator.
FROM gcr.io/distroless/static-debian13:nonroot AS runtime
WORKDIR /app
COPY --from=build --chown=65532:65532 /app/server /app/server
USER 65532:65532
ENV BIND_ADDRESS=0.0.0.0:3000 RUST_LOG=info
EXPOSE 3000
STOPSIGNAL SIGTERM
ENTRYPOINT ["/app/server"]