Iriome
49fcab2ee3
- chown public/, dist/, and scripts/ to node:node after build - add USER node directive before EXPOSE in dist-mono and dist-arm Dockerfiles - update CMD to exec form in dist-mono for consistency Fixes running the container with --user 1000 in environments that don't allow containers to run as root. The sed -i in inject-vars.sh requires write permission on ./public/assets/, which previously failed with 'Permission denied' when running as non-root. The node user (UID 1000) is built into the node:20-slim base image. Existing root deployments are unaffected.
52 lines
1.0 KiB
Docker
52 lines
1.0 KiB
Docker
# ---------------------
|
|
# Frontend build stage
|
|
# ---------------------
|
|
# Build on the host arch (BUILDPLATFORM) rather than under QEMU — the output is
|
|
# pure JS so it's arch-independent, and this avoids the esbuild host/native
|
|
# binary version mismatch under emulation.
|
|
FROM --platform=$BUILDPLATFORM node:20-slim AS frontend-build
|
|
|
|
WORKDIR /app/client
|
|
|
|
COPY client/package*.json ./
|
|
|
|
RUN npm ci
|
|
|
|
COPY client ./
|
|
|
|
RUN npm run build
|
|
|
|
# ---------------------
|
|
# Backend stage
|
|
# ---------------------
|
|
FROM node:20-slim AS backend
|
|
|
|
# Install ping
|
|
RUN apt-get update \
|
|
&& apt-get install -y iputils-ping \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app/server
|
|
|
|
COPY server/package.json ./
|
|
|
|
RUN npm install
|
|
|
|
COPY server ./
|
|
|
|
RUN chmod +x ./scripts/inject-vars.sh
|
|
|
|
RUN npm run build
|
|
|
|
COPY --from=frontend-build /app/client/dist ./public
|
|
|
|
RUN chown -R node:node ./public \
|
|
&& chown -R node:node ./dist \
|
|
&& chown -R node:node ./scripts
|
|
|
|
USER node
|
|
|
|
EXPOSE 52345
|
|
|
|
CMD ["sh", "-c", "./scripts/inject-vars.sh && node ./dist/index.js"]
|