Leonid Pershin
68781ef183
- Added `gosu` for safe privilege dropping in the entrypoint script. - Updated the entrypoint to use `docker-entrypoint.sh` for improved container management. - Ensured necessary directories are created with appropriate permissions during the build process. - Enhanced health check command to verify service availability more reliably.
48 lines
2.9 KiB
Docker
48 lines
2.9 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# ── Stage 1: сборка фронтенда (Vite → dist) ───────────────────────────────
|
|
FROM node:22-alpine AS frontend
|
|
WORKDIR /app/frontend
|
|
RUN corepack enable
|
|
COPY frontend/package.json frontend/pnpm-lock.yaml ./
|
|
RUN corepack prepare pnpm@11.9.0 --activate && pnpm install --frozen-lockfile
|
|
COPY frontend/ ./
|
|
RUN pnpm build
|
|
|
|
# ── Stage 2: publish бэкенда, статика фронта в wwwroot ────────────────────
|
|
FROM mcr.microsoft.com/dotnet/sdk:10.0 AS backend
|
|
WORKDIR /src
|
|
# Сначала манифесты для кэша restore (только цепочка Api → ... → Domain, без tests/)
|
|
COPY backend/Directory.Build.props backend/Directory.Packages.props ./backend/
|
|
COPY backend/src/PnvPanel.Domain/PnvPanel.Domain.csproj ./backend/src/PnvPanel.Domain/
|
|
COPY backend/src/PnvPanel.Application/PnvPanel.Application.csproj ./backend/src/PnvPanel.Application/
|
|
COPY backend/src/PnvPanel.Infrastructure/PnvPanel.Infrastructure.csproj ./backend/src/PnvPanel.Infrastructure/
|
|
COPY backend/src/PnvPanel.Api/PnvPanel.Api.csproj ./backend/src/PnvPanel.Api/
|
|
RUN dotnet restore backend/src/PnvPanel.Api/PnvPanel.Api.csproj
|
|
# Исходники бэкенда
|
|
COPY backend/ ./backend/
|
|
# Сид каталога приложений (PnvPanel.Api.csproj ссылается на него через ../../../seed/)
|
|
COPY seed/ ./seed/
|
|
# Статика собранного фронта → wwwroot (перекрывает заглушку)
|
|
COPY --from=frontend /app/frontend/dist/ ./backend/src/PnvPanel.Api/wwwroot/
|
|
RUN dotnet publish backend/src/PnvPanel.Api/PnvPanel.Api.csproj -c Release -o /app/publish --no-restore
|
|
|
|
# ── Stage 3: runtime ──────────────────────────────────────────────────────
|
|
FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
|
|
WORKDIR /app
|
|
# curl — HEALTHCHECK (GET /health). gosu — безопасный drop-privileges из entrypoint: контейнер
|
|
# стартует под root, чтобы почистить владельца смонтированных volume'ов, и тут же передаёт
|
|
# управление непривилегированному пользователю (см. docker-entrypoint.sh).
|
|
RUN apt-get update && apt-get install -y --no-install-recommends curl gosu \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
ENV ASPNETCORE_ENVIRONMENT=Production \
|
|
ASPNETCORE_HTTP_PORTS=8080
|
|
EXPOSE 8080
|
|
COPY --from=backend /app/publish ./
|
|
COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/docker-entrypoint.sh && mkdir -p /app/keys /app/uploads
|
|
HEALTHCHECK --interval=15s --timeout=5s --start-period=20s --retries=5 \
|
|
CMD curl -f http://localhost:8080/health || exit 1
|
|
ENTRYPOINT ["docker-entrypoint.sh"]
|
|
CMD ["dotnet", "PnvPanel.Api.dll"]
|