build docker image from scratch to reduce runtime dependencies

mtrossbach · Jul 29, 2024 · da2592c · da2592c
1 parent a7e483e
commit da2592c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,17 +1,12 @@
 
 FROM alpine AS builder
-RUN apk update && apk upgrade && apk add --no-cache ca-certificates
-RUN update-ca-certificates
-RUN set -o pipefail && addgroup --gid 1000 gouser && adduser --disabled-password --no-create-home --ingroup gouser gouser
-RUN cat /etc/passwd
-RUN cat /etc/passwd | grep gouser > /etc/passwd_gouser
 
 FROM scratch
 ARG VERSION
 ENV VERSION=${VERSION}
 COPY noah-mqtt /
 COPY LICENSE /
+COPY passwd /etc/passwd
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
-COPY --from=builder /etc/passwd_gouser /etc/passwd
 USER gouser
 ENTRYPOINT ["/noah-mqtt"]
diff --git a/passwd b/passwd
@@ -0,0 +1 @@
+gouser:x:1000:1000:Linux User,,,:/home/gouser:/bin/sh
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		gouser:x:1000:1000:Linux User,,,:/home/gouser:/bin/sh