ARG GO_VERSION=1.15.8 ARG NODE_VERSION=15.8.0 ARG ENV=prod ####################### ## These steps set platform / arch type specific variables ####################### FROM alpine AS arm64-base ENV PROTOC_ARCH aarch_64 FROM alpine AS amd64-base ENV PROTOC_ARCH x86_64 ####################### ## This step sets up the folder structure, ## initalices go mods, ## downloads the protofiles, ## protoc and protoc-gen-grpc-web for later use ####################### FROM ${BUILDARCH}-base AS base ARG PROTOC_VERSION=3.13.0 ARG PROTOC_ZIP=protoc-${PROTOC_VERSION}-linux-${PROTOC_ARCH}.zip ARG GRPC_WEB_VERSION=1.2.1 # no arm specific version available and x86 works fine at the moment: ARG GRPC_WEB=protoc-gen-grpc-web-${GRPC_WEB_VERSION}-linux-x86_64 RUN apk add tar curl WORKDIR /proto #protoc RUN curl -OL https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/$PROTOC_ZIP \ && unzip -o $PROTOC_ZIP -d /usr/local bin/protoc \ && unzip -o $PROTOC_ZIP -d /proto include/* \ && rm -f $PROTOC_ZIP #grpc web RUN curl -OL https://github.com/grpc/grpc-web/releases/download/${GRPC_WEB_VERSION}/${GRPC_WEB} \ && mv ${GRPC_WEB} /usr/local/bin/protoc-gen-grpc-web \ && chmod +x /usr/local/bin/protoc-gen-grpc-web #proto dependencies RUN curl https://raw.githubusercontent.com/envoyproxy/protoc-gen-validate/v0.4.1/validate/validate.proto --create-dirs -o include/validate/validate.proto \ && curl https://raw.githubusercontent.com/grpc-ecosystem/grpc-gateway/v2.2.0/protoc-gen-openapiv2/options/annotations.proto --create-dirs -o include/protoc-gen-openapiv2/options/annotations.proto \ && curl https://raw.githubusercontent.com/grpc-ecosystem/grpc-gateway/v2.2.0/protoc-gen-openapiv2/options/openapiv2.proto --create-dirs -o include/protoc-gen-openapiv2/options/openapiv2.proto \ && curl https://raw.githubusercontent.com/googleapis/googleapis/master/google/api/annotations.proto --create-dirs -o include/google/api/annotations.proto \ && curl https://raw.githubusercontent.com/googleapis/googleapis/master/google/api/http.proto --create-dirs -o include/google/api/http.proto \ && curl https://raw.githubusercontent.com/googleapis/googleapis/master/google/api/field_behavior.proto --create-dirs -o include/google/api/field_behavior.proto #zitadel protos COPY proto/ include/. ####################### ## With this step we prepare all node_modules, this helps caching the build ## Speed up this step by mounting your local node_modules directory ####################### FROM node:${NODE_VERSION} as npm-base WORKDIR /console COPY console/package.json console/package-lock.json ./ RUN npm install COPY console . COPY --from=base /proto /proto COPY --from=base /usr/local/bin /usr/local/bin/. COPY build/console build/console/ RUN build/console/generate-grpc.sh ####################### ## copy for local dev ####################### FROM scratch as npm-copy COPY --from=npm-base /console/src/app/proto/generated ./console/src/app/proto/generated ####################### ## angular dev build ####################### FROM npm-base as dev-angular-build RUN npm install -g @angular/cli ####################### ## angular lint workspace and prod build ####################### FROM npm-base as prod-angular-build RUN npm run lint RUN npm run prodbuild ####################### ## Go dependencies ## Speed up this step by mounting your local go mod pkg directory ####################### FROM golang:${GO_VERSION} as go-dep RUN mkdir -p src/github.com/caos/zitadel # copy mod definitions COPY tools src/github.com/caos/zitadel/tools COPY ./go.* src/github.com/caos/zitadel # install all dependencies WORKDIR /go/src/github.com/caos/zitadel RUN go mod download RUN ./tools/install.sh FROM go-dep AS go-gen COPY --from=base /proto /proto COPY --from=base /usr/local/bin /usr/local/bin/. COPY build/zitadel/generate-grpc.sh build/zitadel/generate-grpc.sh COPY internal/protoc internal/protoc RUN build/zitadel/generate-grpc.sh ####################### ## Go base build ####################### FROM go-gen as go-base # copy all zitadel files COPY . . ####################### ## copy for local dev ####################### FROM scratch as go-copy COPY --from=go-gen /go/src/github.com/caos/zitadel/pkg/grpc ./pkg/grpc COPY --from=go-gen /go/src/github.com/caos/zitadel/openapi/v2/zitadel ./openapi/v2/zitadel COPY --from=go-gen /go/src/github.com/caos/zitadel/internal/protoc/protoc-gen-authoption/templates.gen.go ./internal/protoc/protoc-gen-authoption/templates.gen.go COPY --from=go-gen /go/src/github.com/caos/zitadel/internal/protoc/protoc-gen-authoption/authoption/options.pb.go ./internal/protoc/protoc-gen-authoption/authoption/options.pb.go COPY --from=go-gen /go/src/github.com/caos/zitadel/docs/apis/proto ./docs/docs/apis/proto ####################### ## Go test ####################### FROM go-base as go-test COPY . . # Migrations for cockroach-secure RUN go install github.com/rakyll/statik RUN ./build/operator/prebuild.sh ./migrations RUN go test -race -v -coverprofile=profile.cov $(go list ./... | grep -v /operator/) ####################### ## Go test results ####################### FROM scratch as go-codecov COPY --from=go-test /go/src/github.com/caos/zitadel/profile.cov profile.cov ####################### ## Go prod build ####################### FROM go-test as prod-go-build ARG BUILDARCH COPY --from=prod-angular-build console/dist/console console/dist/console/ RUN go get github.com/rakyll/statik \ && ./build/console/generate-static.sh \ && ./build/login/generate-static.sh \ && ./build/notification/generate-static.sh \ && ./build/zitadel/generate-static.sh \ && ./build/zitadel/generate-openapi-static.sh RUN CGO_ENABLED=0 GOOS=linux GOARCH=${BUILDARCH} go build -a -installsuffix cgo -ldflags '-extldflags "-static"' -o zitadel-linux-${BUILDARCH} cmd/zitadel/main.go ####################### ## Go dev build ####################### FROM go-base as dev-go-build RUN go get github.com/go-delve/delve/cmd/dlv ####################### ## Final Production Image ####################### FROM alpine:latest as artifact ARG BUILDARCH RUN adduser -D zitadel COPY cmd/zitadel/*.yaml /app/ COPY --from=prod-go-build /go/src/github.com/caos/zitadel/zitadel-linux-${BUILDARCH} /app/zitadel RUN chmod a+x /app/zitadel RUN ls -la / ####################### ## Scratch Image ####################### FROM scratch as final COPY --from=artifact /etc/passwd /etc/passwd COPY --from=artifact /etc/ssl/certs /etc/ssl/certs COPY --from=artifact /app / USER zitadel HEALTHCHECK NONE ENTRYPOINT ["/zitadel"]