fitz/Dockerfile at main · cntryl/fitz · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
FROM node:slim AS frontend

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
  bash \
  ca-certificates \
  curl \
  && rm -rf /var/lib/apt/lists/*

RUN curl -fsSL https://vite.plus | bash

ENV PATH="/root/.vite-plus/bin:${PATH}"

WORKDIR /ui

COPY ui/package.json ui/package-lock.json* ./

RUN --mount=type=cache,target=/root/.npm \
  npm ci

COPY ui/ ./

RUN npm run build

FROM rust:slim AS chef

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
  build-essential \
  ca-certificates \
  libssl-dev \
  pkg-config \
  && rm -rf /var/lib/apt/lists/*

RUN cargo install --locked cargo-chef

WORKDIR /usr/src/fitz

FROM chef AS planner

COPY . .
RUN cargo chef prepare --recipe-path recipe.json

FROM chef AS backend

COPY --from=planner /usr/src/fitz/recipe.json recipe.json

RUN --mount=type=cache,target=/usr/local/cargo/registry \
  cargo chef cook --release --locked --recipe-path recipe.json

COPY . .
COPY --from=frontend /ui/dist/ /usr/src/fitz/embedded-ui/

ENV FITZ_EMBED_UI_DIR=/usr/src/fitz/embedded-ui

RUN --mount=type=cache,target=/usr/local/cargo/registry \
  cargo build --release --locked \
  && strip target/release/fitz || true

FROM debian:trixie-slim AS runtime-fs

RUN mkdir -p /data \
  && chown 65532:65532 /data

FROM gcr.io/distroless/cc-debian12 AS runtime

WORKDIR /app

COPY --from=runtime-fs --chown=65532:65532 /data /data
COPY --from=backend /usr/src/fitz/target/release/fitz /app/fitz

USER 65532:65532

EXPOSE 4090 4091

VOLUME ["/data"]

ENTRYPOINT ["/app/fitz"]