fix: pin ruby base by sha256, add wrangler+prettier, use apt-get (closes #1) #2

Merged
clawbot merged 1 commits from feature/pin-and-add-deps into main 2026-02-22 18:05:22 +01:00

View File

@ -1,6 +1,7 @@
FROM ruby:3.1-bullseye AS builder # ruby:3.1-bullseye, pinned 2026-02-22
FROM ruby@sha256:4cc0e5aaa726f8c2cbf1dfc8e5ecd459dbfbebe44b5eee5da6f79ffcc1b6c36f AS builder
RUN apt update && apt install -y \ RUN apt-get update && apt-get install -y --no-install-recommends \
bsdmainutils \ bsdmainutils \
build-essential \ build-essential \
make \ make \
@ -11,7 +12,8 @@ RUN apt update && apt install -y \
libxslt-dev \ libxslt-dev \
pkg-config \ pkg-config \
python3 \ python3 \
xz-utils xz-utils \
&& rm -rf /var/lib/apt/lists/*
# Node.js 20.18.3 LTS, pinned by sha256 # Node.js 20.18.3 LTS, pinned by sha256
RUN cd /tmp && \ RUN cd /tmp && \
@ -21,11 +23,12 @@ RUN cd /tmp && \
rm node-v20.18.3-linux-x64.tar.xz rm node-v20.18.3-linux-x64.tar.xz
RUN npm install -g yarn && \ RUN npm install -g yarn && \
yarn global add prettier yarn global add prettier && \
npm install -g wrangler
ADD ./Gemfile* ./ ADD ./Gemfile* ./
RUN echo "gem: --no-ri --no-rdoc" > ~/.gemrc && \ RUN echo "gem: --no-ri --no-rdoc" > ~/.gemrc && \
yes | gem update --system && \ yes | gem update --system && \
gem install bundler && \ gem install bundler && \
bundle install bundle install