mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-07-12 06:02:35 -05:00
137f31bb20
The scratch image shipped /tmp owned by 1000:1000 and writable only by UID 1000, so containers run under a different user (e.g. Unraid's 99:100, OpenShift random UIDs, or any `user:` override) could not create the temp file used for data exports, failing with: error creating temp file: open /tmp/vikunja-export-*.zip: permission denied The builder-stage `chmod 1777 /tmp` did not survive into the final image (see #2316, which had to add --chown to make it writable for UID 1000), so the world-writable intent was lost. Force the mode at copy time with BuildKit's --chmod=1777, restoring a normal sticky, world-writable /tmp that works for every UID. Closes go-vikunja/vikunja#2755
62 lines
2.1 KiB
Docker
62 lines
2.1 KiB
Docker
# syntax=docker/dockerfile:1@sha256:b6afd42430b15f2d2a4c5a02b919e98a525b785b1aaff16747d2f623364e39b6
|
|
FROM --platform=$BUILDPLATFORM node:24.13.0-alpine@sha256:931d7d57f8c1fd0e2179dbff7cc7da4c9dd100998bc2b32afc85142d8efbc213 AS frontendbuilder
|
|
|
|
WORKDIR /build
|
|
|
|
ENV PNPM_CACHE_FOLDER=.cache/pnpm/
|
|
ENV PUPPETEER_SKIP_DOWNLOAD=true
|
|
ENV CYPRESS_INSTALL_BINARY=0
|
|
|
|
COPY frontend/pnpm-lock.yaml frontend/package.json frontend/.npmrc ./
|
|
RUN npm install -g corepack && corepack enable && \
|
|
pnpm install --frozen-lockfile
|
|
COPY frontend/ ./
|
|
ARG RELEASE_VERSION=dev
|
|
RUN echo "{\"VERSION\": \"${RELEASE_VERSION/-g/-}\"}" > src/version.json && pnpm run build
|
|
|
|
FROM --platform=$BUILDPLATFORM ghcr.io/techknowlogick/xgo:go-1.25.x@sha256:11ac5e6cb8767caea0c62c420e053cb69554638ec255f9bbef8ed411e70c9eec AS apibuilder
|
|
|
|
RUN go install github.com/magefile/mage@latest && \
|
|
mv /go/bin/mage /usr/local/go/bin
|
|
|
|
WORKDIR /go/src/code.vikunja.io/api
|
|
COPY . ./
|
|
COPY --from=frontendbuilder /build/dist ./frontend/dist
|
|
|
|
ARG TARGETOS TARGETARCH TARGETVARIANT RELEASE_VERSION
|
|
ENV RELEASE_VERSION=$RELEASE_VERSION
|
|
|
|
RUN export PATH=$PATH:$GOPATH/bin && \
|
|
mage build:clean && \
|
|
(cd build && mage release:xgo vikunja "${TARGETOS}/${TARGETARCH}/${TARGETVARIANT}")
|
|
|
|
RUN mkdir -p /tmp && chmod 1777 /tmp
|
|
|
|
# ┬─┐┬ ┐┌┐┐┌┐┐┬─┐┬─┐
|
|
# │┬┘│ │││││││├─ │┬┘
|
|
# ┘└┘┘─┘┘└┘┘└┘┴─┘┘└┘
|
|
|
|
# The actual image
|
|
FROM scratch
|
|
|
|
LABEL org.opencontainers.image.authors='maintainers@vikunja.io'
|
|
LABEL org.opencontainers.image.url='https://vikunja.io'
|
|
LABEL org.opencontainers.image.documentation='https://vikunja.io/docs'
|
|
LABEL org.opencontainers.image.source='https://code.vikunja.io/vikunja'
|
|
LABEL org.opencontainers.image.licenses='AGPLv3'
|
|
LABEL org.opencontainers.image.title='Vikunja'
|
|
|
|
WORKDIR /app/vikunja
|
|
ENTRYPOINT [ "/app/vikunja/vikunja" ]
|
|
EXPOSE 3456
|
|
|
|
COPY --from=apibuilder --chown=1000:1000 --chmod=1777 /tmp /tmp
|
|
|
|
USER 1000
|
|
|
|
ENV VIKUNJA_SERVICE_ROOTPATH=/app/vikunja/
|
|
ENV VIKUNJA_DATABASE_PATH=/db/vikunja.db
|
|
|
|
COPY --from=apibuilder /build/vikunja-* vikunja
|
|
COPY --from=apibuilder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
|