sneak
7468b4e5f6
All checks were successful
check / check (push) Successful in 25s
The frontend Dockerfile ran only yarn build, so the container build failed only on a broken build, not on lint or fmt-check regressions -- while script/cibuild's comment already assumed the Dockerfile ran make check. Install make in the build stage and run make check (test + lint + fmt-check) in place of the bare yarn build. Its test step is the production yarn build, so dist/ is still produced in a single build with no redundant rebuild, and CI now goes red on any check failure.
22 lines
785 B
Docker
22 lines
785 B
Docker
# node:22-alpine as of 2026-02-22
|
|
FROM node@sha256:e4bf2a82ad0a4037d28035ae71529873c069b13eb0455466ae0bc13363826e34 AS build
|
|
WORKDIR /app
|
|
COPY package.json yarn.lock ./
|
|
RUN yarn install --frozen-lockfile
|
|
RUN apk add --no-cache git make
|
|
COPY . .
|
|
# make check runs script/check (test + lint + fmt-check); its test step
|
|
# is the production yarn build, so this both produces dist/ and gates the
|
|
# image on lint/fmt-check/test regressions, not merely a broken build.
|
|
RUN make check
|
|
|
|
# nginx:stable-alpine as of 2026-02-22
|
|
FROM nginx@sha256:15e96e59aa3b0aada3a121296e3bce117721f42d88f5f64217ef4b18f458c6ab
|
|
RUN rm /etc/nginx/conf.d/default.conf
|
|
COPY nginx.conf /etc/nginx/conf.d/netwatch.conf
|
|
COPY --from=build /app/dist /usr/share/nginx/html
|
|
|
|
EXPOSE 8080
|
|
|
|
CMD ["nginx", "-g", "daemon off;"]
|