jochen
ef3e5ae9b0
mesh/merge-gate head ef3e5ae9b0dc merged into trunk 1d244d5aa24e — pass: builds build-agent, mesh-controller, route-proxy → ace, g14, novox, shanks; no bus…
mesh/repo-check head ef3e5ae9b0dc merged into trunk 1d244d5aa24e — pass: its merge-check.sh passed
mesh/delivery delivered
The genesis image copies the whole clone with .git, so its controller carried the commit it was built at, as the bundles did.
18 lines
758 B
Docker
18 lines
758 B
Docker
# The route proxy, as a module ships one.
|
|
#
|
|
# Static and FROM scratch like the control plane's image, and for the same reason: it is fetched
|
|
# by digest and run on a machine, so everything in it is something a person would have to audit.
|
|
# The Go it builds with is the one the manifest pins (build.on GO_BASE), passed by the Makefile and the
|
|
# build machine alike; the default only serves a hand build, and matches go.mod.
|
|
ARG GO_BASE=golang:1.26-alpine
|
|
FROM ${GO_BASE} AS build
|
|
WORKDIR /src
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
COPY . .
|
|
RUN CGO_ENABLED=0 go build -trimpath -buildvcs=false -ldflags '-s -w' -o /mesh-route-proxy ./examples/route-proxy
|
|
|
|
FROM scratch
|
|
COPY --from=build /mesh-route-proxy /mesh-route-proxy
|
|
ENTRYPOINT ["/mesh-route-proxy"]
|