0e07c647c5
Split fake multi-stage Dockerfile into independent CI builder and runtime images. Add proper entrypoint with UID/GID remapping via PUID/PGID, sentinel-based first-boot bootstrap, pre-creation of critical file targets, and signal-forwarding privilege drop via gosu. Standardize on Node 24, split compose into minimal + full reference. Closes #9
20 lines
919 B
Text
20 lines
919 B
Text
# ──────────────────────────────────────────────
|
|
# CI Builder
|
|
# Image: ghcr.io/gsd-build/gsd-ci-builder
|
|
# Used by: pipeline.yml Dev stage
|
|
# ──────────────────────────────────────────────
|
|
FROM node:24-bookworm
|
|
|
|
# Rust toolchain (stable, minimal profile)
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --profile minimal
|
|
ENV PATH="/root/.cargo/bin:${PATH}"
|
|
|
|
# Cross-compilation for linux-arm64
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
gcc-aarch64-linux-gnu \
|
|
g++-aarch64-linux-gnu \
|
|
&& rustup target add aarch64-unknown-linux-gnu \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Verify toolchain
|
|
RUN node --version && rustc --version && cargo --version
|