pomerium/Dockerfile
Bobby DeSimone c18f7d89ae
deployment: use distroless builds (#101)
Replaces the current alpine based Dockerfile with distroless. Improvements include:

- Minimal surface area, ideal for static builds like pomerium.
- Includes `ca-certificates`
- Includes`nsswitch`

Closes #97 .
2019-05-02 19:02:46 -07:00

15 lines
351 B
Docker

FROM golang:latest as build
WORKDIR /go/src/github.com/pomerium/pomerium
ENV CGO_ENABLED=0
ENV GO111MODULE=on
# cache depedency downloads
COPY go.mod go.sum ./
RUN go mod download
COPY . .
# build
RUN make build
FROM gcr.io/distroless/static
WORKDIR /pomerium
COPY --from=build /go/src/github.com/pomerium/pomerium/bin/* /bin/
CMD ["/bin/pomerium"]