mirror of
https://github.com/siderolabs/kres.git
synced 2026-02-05 09:45:35 +01:00
1ffefb6cb0
Bump: * go: 1.25..5 => 1.25.6 * golangci-lint: 2.7.2 => 2.8.0 * goimports: 0.40.1 => 0.41.0 * bun container image: 1.3.5-alpine => 1.3.6-alpine Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
197 lines
8.1 KiB
Docker
197 lines
8.1 KiB
Docker
# syntax = docker/dockerfile-upstream:1.20.0-labs
|
|
|
|
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
|
|
#
|
|
# Generated on 2026-01-16T08:46:36Z by kres 6f7b97a-dirty.
|
|
|
|
ARG TOOLCHAIN=scratch
|
|
|
|
FROM ghcr.io/siderolabs/ca-certificates:v1.12.0 AS image-ca-certificates
|
|
|
|
FROM ghcr.io/siderolabs/fhs:v1.12.0 AS image-fhs
|
|
|
|
# runs markdownlint
|
|
FROM docker.io/oven/bun:1.3.6-alpine AS lint-markdown
|
|
WORKDIR /src
|
|
RUN bun i markdownlint-cli@0.47.0 sentences-per-line@0.5.0
|
|
COPY .markdownlint.json .
|
|
COPY ./README.md ./README.md
|
|
RUN bunx markdownlint --ignore "CHANGELOG.md" --ignore "**/node_modules/**" --ignore '**/hack/chglog/**' --rules markdownlint-sentences-per-line .
|
|
|
|
# base toolchain image
|
|
FROM --platform=${BUILDPLATFORM} ${TOOLCHAIN} AS toolchain
|
|
RUN apk --update --no-cache add bash build-base curl jq protoc protobuf-dev
|
|
|
|
# build tools
|
|
FROM --platform=${BUILDPLATFORM} toolchain AS tools
|
|
ENV GO111MODULE=on
|
|
ARG CGO_ENABLED
|
|
ENV CGO_ENABLED=${CGO_ENABLED}
|
|
ARG GOTOOLCHAIN
|
|
ENV GOTOOLCHAIN=${GOTOOLCHAIN}
|
|
ARG GOEXPERIMENT
|
|
ENV GOEXPERIMENT=${GOEXPERIMENT}
|
|
ENV GOPATH=/go
|
|
ARG DEEPCOPY_VERSION
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg go install github.com/siderolabs/deep-copy@${DEEPCOPY_VERSION} \
|
|
&& mv /go/bin/deep-copy /bin/deep-copy
|
|
ARG GOLANGCILINT_VERSION
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@${GOLANGCILINT_VERSION} \
|
|
&& mv /go/bin/golangci-lint /bin/golangci-lint
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg go install golang.org/x/vuln/cmd/govulncheck@latest \
|
|
&& mv /go/bin/govulncheck /bin/govulncheck
|
|
ARG GOFUMPT_VERSION
|
|
RUN go install mvdan.cc/gofumpt@${GOFUMPT_VERSION} \
|
|
&& mv /go/bin/gofumpt /bin/gofumpt
|
|
|
|
# tools and sources
|
|
FROM tools AS base
|
|
WORKDIR /src
|
|
COPY go.mod go.mod
|
|
COPY go.sum go.sum
|
|
RUN cd .
|
|
RUN --mount=type=cache,target=/go/pkg,id=kres/go/pkg go mod download
|
|
RUN --mount=type=cache,target=/go/pkg,id=kres/go/pkg go mod verify
|
|
COPY ./cmd ./cmd
|
|
COPY ./internal ./internal
|
|
RUN --mount=type=cache,target=/go/pkg,id=kres/go/pkg go list -mod=readonly all >/dev/null
|
|
|
|
FROM tools AS embed-generate
|
|
ARG SHA
|
|
ARG TAG
|
|
WORKDIR /src
|
|
RUN mkdir -p internal/version/data && \
|
|
echo -n ${SHA} > internal/version/data/sha && \
|
|
echo -n ${TAG} > internal/version/data/tag
|
|
|
|
# runs gofumpt
|
|
FROM base AS lint-gofumpt
|
|
RUN FILES="$(gofumpt -l .)" && test -z "${FILES}" || (echo -e "Source code is not formatted with 'gofumpt -w .':\n${FILES}"; exit 1)
|
|
|
|
# runs golangci-lint
|
|
FROM base AS lint-golangci-lint
|
|
WORKDIR /src
|
|
COPY .golangci.yml .
|
|
ENV GOGC=50
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/root/.cache/golangci-lint,id=kres/root/.cache/golangci-lint,sharing=locked --mount=type=cache,target=/go/pkg,id=kres/go/pkg golangci-lint run --config .golangci.yml
|
|
|
|
# runs golangci-lint fmt
|
|
FROM base AS lint-golangci-lint-fmt-run
|
|
WORKDIR /src
|
|
COPY .golangci.yml .
|
|
ENV GOGC=50
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/root/.cache/golangci-lint,id=kres/root/.cache/golangci-lint,sharing=locked --mount=type=cache,target=/go/pkg,id=kres/go/pkg golangci-lint fmt --config .golangci.yml
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/root/.cache/golangci-lint,id=kres/root/.cache/golangci-lint,sharing=locked --mount=type=cache,target=/go/pkg,id=kres/go/pkg golangci-lint run --fix --issues-exit-code 0 --config .golangci.yml
|
|
|
|
# runs govulncheck
|
|
FROM base AS lint-govulncheck
|
|
WORKDIR /src
|
|
COPY --chmod=0755 hack/govulncheck.sh ./hack/govulncheck.sh
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg ./hack/govulncheck.sh ./...
|
|
|
|
# runs unit-tests with race detector
|
|
FROM base AS unit-tests-race
|
|
WORKDIR /src
|
|
ARG TESTPKGS
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg --mount=type=cache,target=/tmp,id=kres/tmp CGO_ENABLED=1 go test -race ${TESTPKGS}
|
|
|
|
# runs unit-tests
|
|
FROM base AS unit-tests-run
|
|
WORKDIR /src
|
|
ARG TESTPKGS
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg --mount=type=cache,target=/tmp,id=kres/tmp go test -covermode=atomic -coverprofile=coverage.txt -coverpkg=${TESTPKGS} ${TESTPKGS}
|
|
|
|
FROM embed-generate AS embed-abbrev-generate
|
|
WORKDIR /src
|
|
ARG ABBREV_TAG
|
|
RUN echo -n 'undefined' > internal/version/data/sha && \
|
|
echo -n ${ABBREV_TAG} > internal/version/data/tag
|
|
|
|
# clean golangci-lint fmt output
|
|
FROM scratch AS lint-golangci-lint-fmt
|
|
COPY --from=lint-golangci-lint-fmt-run /src .
|
|
|
|
FROM scratch AS unit-tests
|
|
COPY --from=unit-tests-run /src/coverage.txt /coverage-unit-tests.txt
|
|
|
|
# cleaned up specs and compiled versions
|
|
FROM scratch AS generate
|
|
COPY --from=embed-abbrev-generate /src/internal/version internal/version
|
|
|
|
# builds kres-darwin-amd64
|
|
FROM base AS kres-darwin-amd64-build
|
|
COPY --from=generate / /
|
|
COPY --from=embed-generate / /
|
|
WORKDIR /src/cmd/kres
|
|
ARG GO_BUILDFLAGS
|
|
ARG GO_LDFLAGS
|
|
ARG VERSION_PKG="internal/version"
|
|
ARG SHA
|
|
ARG TAG
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg GOARCH=amd64 GOOS=darwin go build ${GO_BUILDFLAGS} -ldflags "${GO_LDFLAGS} -X ${VERSION_PKG}.Name=kres -X ${VERSION_PKG}.SHA=${SHA} -X ${VERSION_PKG}.Tag=${TAG}" -o /kres-darwin-amd64
|
|
|
|
# builds kres-darwin-arm64
|
|
FROM base AS kres-darwin-arm64-build
|
|
COPY --from=generate / /
|
|
COPY --from=embed-generate / /
|
|
WORKDIR /src/cmd/kres
|
|
ARG GO_BUILDFLAGS
|
|
ARG GO_LDFLAGS
|
|
ARG VERSION_PKG="internal/version"
|
|
ARG SHA
|
|
ARG TAG
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg GOARCH=arm64 GOOS=darwin go build ${GO_BUILDFLAGS} -ldflags "${GO_LDFLAGS} -X ${VERSION_PKG}.Name=kres -X ${VERSION_PKG}.SHA=${SHA} -X ${VERSION_PKG}.Tag=${TAG}" -o /kres-darwin-arm64
|
|
|
|
# builds kres-linux-amd64
|
|
FROM base AS kres-linux-amd64-build
|
|
COPY --from=generate / /
|
|
COPY --from=embed-generate / /
|
|
WORKDIR /src/cmd/kres
|
|
ARG GO_BUILDFLAGS
|
|
ARG GO_LDFLAGS
|
|
ARG VERSION_PKG="internal/version"
|
|
ARG SHA
|
|
ARG TAG
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg GOARCH=amd64 GOOS=linux go build ${GO_BUILDFLAGS} -ldflags "${GO_LDFLAGS} -X ${VERSION_PKG}.Name=kres -X ${VERSION_PKG}.SHA=${SHA} -X ${VERSION_PKG}.Tag=${TAG}" -o /kres-linux-amd64
|
|
|
|
# builds kres-linux-arm64
|
|
FROM base AS kres-linux-arm64-build
|
|
COPY --from=generate / /
|
|
COPY --from=embed-generate / /
|
|
WORKDIR /src/cmd/kres
|
|
ARG GO_BUILDFLAGS
|
|
ARG GO_LDFLAGS
|
|
ARG VERSION_PKG="internal/version"
|
|
ARG SHA
|
|
ARG TAG
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=kres/root/.cache/go-build --mount=type=cache,target=/go/pkg,id=kres/go/pkg GOARCH=arm64 GOOS=linux go build ${GO_BUILDFLAGS} -ldflags "${GO_LDFLAGS} -X ${VERSION_PKG}.Name=kres -X ${VERSION_PKG}.SHA=${SHA} -X ${VERSION_PKG}.Tag=${TAG}" -o /kres-linux-arm64
|
|
|
|
FROM scratch AS kres-darwin-amd64
|
|
COPY --from=kres-darwin-amd64-build /kres-darwin-amd64 /kres-darwin-amd64
|
|
|
|
FROM scratch AS kres-darwin-arm64
|
|
COPY --from=kres-darwin-arm64-build /kres-darwin-arm64 /kres-darwin-arm64
|
|
|
|
FROM scratch AS kres-linux-amd64
|
|
COPY --from=kres-linux-amd64-build /kres-linux-amd64 /kres-linux-amd64
|
|
|
|
FROM scratch AS kres-linux-arm64
|
|
COPY --from=kres-linux-arm64-build /kres-linux-arm64 /kres-linux-arm64
|
|
|
|
FROM kres-linux-${TARGETARCH} AS kres
|
|
|
|
FROM scratch AS kres-all
|
|
COPY --from=kres-darwin-amd64 / /
|
|
COPY --from=kres-darwin-arm64 / /
|
|
COPY --from=kres-linux-amd64 / /
|
|
COPY --from=kres-linux-arm64 / /
|
|
|
|
FROM scratch AS image-kres
|
|
ARG TARGETARCH
|
|
COPY --from=kres kres-linux-${TARGETARCH} /kres
|
|
COPY --from=image-fhs / /
|
|
COPY --from=image-ca-certificates / /
|
|
LABEL org.opencontainers.image.source=https://github.com/siderolabs/kres
|
|
ENTRYPOINT ["/kres","gen"]
|
|
|