60d707b314
All checks were successful
check / check (push) Successful in 1m3s
The container failed to start with 'exec ./webhooker: no such file or directory'. Two issues: 1. Relative paths: COPY destination and CMD used relative paths (./webhooker). Changed to absolute paths (/app/webhooker) throughout. 2. Dynamic linking: The binary was built with CGO on Debian (glibc) but deployed to Alpine (musl). The kernel couldn't find the glibc dynamic linker, producing the misleading 'no such file or directory' error. Added a static rebuild step after make check so the binary runs on Alpine without glibc.
80 lines
2.8 KiB
Docker
80 lines
2.8 KiB
Docker
# golang:1.24 (bookworm) — 2026-03-01
|
|
# Using Debian-based image because gorm.io/driver/sqlite pulls in
|
|
# mattn/go-sqlite3 (CGO), which does not compile on Alpine musl.
|
|
FROM golang@sha256:d2d2bc1c84f7e60d7d2438a3836ae7d0c847f4888464e7ec9ba3a1339a1ee804 AS builder
|
|
|
|
# gcc is pre-installed in the Debian-based golang image
|
|
RUN apt-get update && apt-get install -y --no-install-recommends make && rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /build
|
|
|
|
# Install golangci-lint v1.64.8 — 2026-03-01
|
|
# Using v1.x because the repo's .golangci.yml uses v1 config format.
|
|
RUN set -eux; \
|
|
GOLANGCI_VERSION="1.64.8"; \
|
|
ARCH="$(uname -m)"; \
|
|
case "${ARCH}" in \
|
|
x86_64) \
|
|
GOARCH="amd64"; \
|
|
GOLANGCI_SHA256="b6270687afb143d019f387c791cd2a6f1cb383be9b3124d241ca11bd3ce2e54e"; \
|
|
;; \
|
|
aarch64) \
|
|
GOARCH="arm64"; \
|
|
GOLANGCI_SHA256="a6ab58ebcb1c48572622146cdaec2956f56871038a54ed1149f1386e287789a5"; \
|
|
;; \
|
|
*) echo "unsupported architecture: ${ARCH}" && exit 1 ;; \
|
|
esac; \
|
|
wget -q "https://github.com/golangci/golangci-lint/releases/download/v${GOLANGCI_VERSION}/golangci-lint-${GOLANGCI_VERSION}-linux-${GOARCH}.tar.gz" \
|
|
-O /tmp/golangci-lint.tar.gz; \
|
|
echo "${GOLANGCI_SHA256} /tmp/golangci-lint.tar.gz" | sha256sum -c -; \
|
|
tar -xzf /tmp/golangci-lint.tar.gz -C /tmp; \
|
|
mv "/tmp/golangci-lint-${GOLANGCI_VERSION}-linux-${GOARCH}/golangci-lint" /usr/local/bin/; \
|
|
rm -rf /tmp/golangci-lint*; \
|
|
golangci-lint --version
|
|
|
|
# Copy go module files and download dependencies
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Run all checks (fmt-check, lint, test, build)
|
|
RUN make check
|
|
|
|
# Rebuild with static linking for Alpine runtime.
|
|
# make check already verified formatting, linting, tests, and compilation.
|
|
# The CGO binary from `make build` is dynamically linked against glibc,
|
|
# which doesn't exist on Alpine (musl). Rebuild with static linking so
|
|
# the binary runs on Alpine without glibc.
|
|
RUN CGO_ENABLED=1 go build -ldflags '-extldflags "-static"' -o bin/webhooker ./cmd/webhooker
|
|
|
|
# alpine:3.21 — 2026-03-01
|
|
FROM alpine@sha256:c3f8e73fdb79deaebaa2037150150191b9dcbfba68b4a46d70103204c53f4709
|
|
|
|
RUN apk --no-cache add ca-certificates
|
|
|
|
# Create non-root user
|
|
RUN addgroup -g 1000 -S webhooker && \
|
|
adduser -u 1000 -S webhooker -G webhooker
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /build/bin/webhooker /app/webhooker
|
|
|
|
# Create data directory for all SQLite databases (main app DB +
|
|
# per-webhook event DBs). DATA_DIR defaults to /data in production.
|
|
RUN mkdir -p /data
|
|
|
|
RUN chown -R webhooker:webhooker /app /data
|
|
|
|
USER webhooker
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost:8080/.well-known/healthcheck || exit 1
|
|
|
|
CMD ["/app/webhooker"]
|