krz/skunky-art

 1ARG GO_VERSION=1.18
 2
 3FROM --platform=$BUILDPLATFORM golang:${GO_VERSION} AS build
 4ARG TARGETOS
 5ARG TARGETARCH
 6
 7WORKDIR /build
 8COPY . .
 9RUN CGO_ENABLED=0 GOARCH=${TARGETARCH} GOOS=${TARGETOS} go build -ldflags "-s -w -extldflags '-static'" && \
10  echo "skunkyart:x:10000:10000:SkunkyArt user:/:/sbin/nologin" > /etc/minimal-passwd && \
11  echo "skunkyart:x:10000:" > /etc/minimal-group
12
13FROM scratch
14
15COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
16COPY --from=build /build/static /static
17COPY --from=build /build/skunkyart /skunkyart
18COPY --from=build /etc/minimal-passwd /etc/passwd
19COPY --from=build /etc/minimal-group /etc/group
20
21USER skunkyart
22
23ENTRYPOINT ["/skunkyart"]