Dockerfile

# syntax=docker.io/docker/dockerfile:1.3.1

ARG PACKAGE=${PACKAGE:-"fip_api"}
ARG REF_NAME=${REF_NAME:-"gcr.io/distroless/static-debian11:nonroot@sha256:bca3c203cdb36f5914ab8568e4c25165643ea9b711b41a8a58b42c80a51ed609"}

FROM docker.io/curlimages/curl:7.81.0 as fip
ARG BUILDARCH
ARG BUILDOS
ARG BUILDPLATFORM
ARG BUILDVARIANT
ARG TARGETARCH
ARG TARGETOS
ARG TARGETPLATFORM
ARG TARGETVARIANT
ARG ARCHVARIANT=${TARGETARCH}${TARGETVARIANT}
ARG PACKAGE
ARG VERSION
RUN set -eux \
    && curl --location --output /tmp/${PACKAGE} --show-error --silent https://github.com/smhmayboudi/fip/releases/download/v${VERSION}/${PACKAGE}-v${VERSION}-${ARCHVARIANT} \
    && chmod 755 /tmp/${PACKAGE}

# FROM docker.io/curlimages/curl:7.81.0 as linkerd-await
# ARG LINKERD_AWAIT_VERSION=v0.2.4
# RUN curl --location --output /tmp/linkerd-await --show-error --silent https://github.com/linkerd/linkerd-await/releases/download/release%2F${LINKERD_AWAIT_VERSION}/linkerd-await-${LINKERD_AWAIT_VERSION}-amd64 \
#     && chmod 755 /tmp/linkerd-await

FROM ${REF_NAME} as base
ARG PACKAGE
COPY --chown=nonroot:nonroot --from=fip /tmp/${PACKAGE} /${PACKAGE}
# COPY --chown=nonroot:nonroot --from=linkerd-await /tmp/linkerd-await /linkerd-await

FROM base AS fip_api
COPY --chown=nonroot:nonroot ./fip_api/auth_model.conf /
COPY --chown=nonroot:nonroot ./fip_api/auth_policy.csv /

FROM base AS fip_at
COPY --chown=nonroot:nonroot ./fip_at/at.db /

FROM base AS fip_jwks
COPY --chown=nonroot:nonroot ./fip_jwks/jwks.db /

FROM base AS fip_rt
COPY --chown=nonroot:nonroot ./fip_rt/rt.db /

FROM base AS fip_user
COPY --chown=nonroot:nonroot ./fip_user/user.db /

FROM ${PACKAGE} AS after-condition
USER nonroot:nonroot
# ENTRYPOINT ["/linkerd-await", "--shutdown", "--"]
CMD ["/${PACKAGE}"]