# syntax=docker/dockerfile:1 # check=error=true # --- Version Arguments --- ARG RUBY_VERSION=3.4.7 ARG NODE_VERSION=22.16.0 ARG BUN_VERSION=1.3.9 # --- Stage 1: Grab Node.js Binaries --- # We use the official image as a source for pre-compiled binaries FROM docker.io/library/node:${NODE_VERSION}-slim AS node_source # --- Stage 2: Base (Runtime Environment) --- FROM docker.io/library/ruby:${RUBY_VERSION}-slim AS base WORKDIR /rails # Install runtime-only system packages RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \ --mount=type=cache,target=/var/lib/apt,sharing=locked \ apt-get update -qq && \ apt-get install --no-install-recommends -y \ curl libjemalloc2 libvips libpq-dev telnet imagemagick wget # Set production environment ENV RAILS_ENV="production" \ BUNDLE_DEPLOYMENT="1" \ BUNDLE_PATH="/usr/local/bundle" \ BUNDLE_WITHOUT="development:test:doc" # --- Stage 3: Build (Compilation & Assets) --- FROM base AS build # Install packages needed to build gems and node modules RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \ --mount=type=cache,target=/var/lib/apt,sharing=locked \ apt-get update -qq && \ apt-get install --no-install-recommends -y \ build-essential git libyaml-dev node-gyp pkg-config python-is-python3 # "Heist" Node.js and npm from the node_source stage (build-time only) COPY --from=node_source /usr/local/bin/node /usr/local/bin/node COPY --from=node_source /usr/local/lib/node_modules /usr/local/lib/node_modules # Re-link npm and install Bun (build-time only) RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \ npm install -g bun@${BUN_VERSION} # 1. Install Gems (Separate COPY for maximum caching) COPY Gemfile Gemfile.lock ./ RUN --mount=type=cache,target=/usr/local/bundle/cache \ bundle config set --local path "${BUNDLE_PATH}" && \ bundle install && \ bundle exec bootsnap precompile --gemfile # 2. Install JavaScript dependencies (Separate COPY for maximum caching) COPY package.json bun.lock ./ RUN bun install --frozen-lockfile # 3. Copy application code COPY . . # 4. Precompile assets and bootsnap RUN bundle exec bootsnap precompile app/ lib/ && \ SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile && \ rm -rf node_modules tmp/cache # --- Stage 4: Final Production Image --- FROM base # Copy built artifacts: gems and the app (with precompiled assets) COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}" COPY --from=build /rails /rails # Strip unnecessary bundle artifacts (gem cache, docs, build_info) RUN rm -rf /usr/local/bundle/ruby/*/cache /usr/local/bundle/ruby/*/doc /usr/local/bundle/ruby/*/build_info /usr/local/bundle/ruby/*/plugins # Security: Run as non-root user RUN groupadd --system --gid 1000 rails && \ useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash && \ chown -R rails:rails db log tmp public # Create versioninfo with build timestamp RUN date +"%Y-%m-%d %H:%M:%S %Z" > public/versioninfo USER 1000:1000 ENTRYPOINT ["/rails/bin/docker-entrypoint"] EXPOSE 80 CMD ["./bin/thrust", "./bin/rails", "server"]