70 lines
2.7 KiB
Docker
70 lines
2.7 KiB
Docker
###################
|
|
# STAGE 1: builder
|
|
###################
|
|
|
|
FROM node:22-bullseye AS builder
|
|
|
|
ARG MB_EDITION=oss
|
|
ARG VERSION
|
|
|
|
WORKDIR /home/node
|
|
|
|
RUN apt-get update && apt-get upgrade -y && apt-get install wget apt-transport-https gpg curl git -y \
|
|
&& wget -qO - https://packages.adoptium.net/artifactory/api/gpg/key/public | gpg --dearmor | tee /etc/apt/trusted.gpg.d/adoptium.gpg > /dev/null \
|
|
&& echo "deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main" | tee /etc/apt/sources.list.d/adoptium.list \
|
|
&& apt-get update \
|
|
&& apt install temurin-25-jdk -y \
|
|
&& curl -O https://download.clojure.org/install/linux-install-1.12.0.1488.sh \
|
|
&& chmod +x linux-install-1.12.0.1488.sh \
|
|
&& ./linux-install-1.12.0.1488.sh \
|
|
&& curl -LsSf https://astral.sh/uv/install.sh | sh
|
|
|
|
ENV PATH="/root/.local/bin:$PATH"
|
|
|
|
COPY . .
|
|
|
|
# version is pulled from git, but git doesn't trust the directory due to different owners
|
|
RUN git config --global --add safe.directory /home/node
|
|
|
|
# install bun for frontend dependencies
|
|
RUN npm install -g bun
|
|
|
|
# install frontend dependencies
|
|
RUN bun install --frozen-lockfile
|
|
|
|
RUN INTERACTIVE=false CI=true MB_EDITION=$MB_EDITION bin/build.sh :version ${VERSION}
|
|
|
|
# ###################
|
|
# # STAGE 2: runner
|
|
# ###################
|
|
|
|
## Remember that this runner image needs to be the same as bin/docker/Dockerfile with the exception that this one grabs the
|
|
## jar from the previous stage rather than the local build
|
|
|
|
FROM eclipse-temurin:25-jre-alpine AS runner
|
|
|
|
ENV FC_LANG=en-US LC_CTYPE=en_US.UTF-8
|
|
|
|
# copy certs before the RUN so keytool can import them
|
|
COPY bin/docker/DigiCertGlobalRootG2.crt.pem /app/certs/DigiCertGlobalRootG2.crt.pem
|
|
|
|
# dependencies
|
|
RUN apk add -U bash fontconfig curl font-noto font-noto-arabic font-noto-hebrew font-noto-cjk java-cacerts && \
|
|
apk upgrade && \
|
|
rm -rf /var/cache/apk/* && \
|
|
mkdir -p /app/certs && \
|
|
curl https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem -o /app/certs/rds-combined-ca-bundle.pem && \
|
|
/opt/java/openjdk/bin/keytool -noprompt -import -trustcacerts -alias aws-rds -file /app/certs/rds-combined-ca-bundle.pem -keystore /etc/ssl/certs/java/cacerts -keypass changeit -storepass changeit && \
|
|
/opt/java/openjdk/bin/keytool -noprompt -import -trustcacerts -alias azure-cert -file /app/certs/DigiCertGlobalRootG2.crt.pem -keystore /etc/ssl/certs/java/cacerts -keypass changeit -storepass changeit && \
|
|
mkdir -p /plugins && chmod a+rwx /plugins
|
|
|
|
# add Metabase script and uberjar
|
|
COPY --from=builder /home/node/target/uberjar/metabase.jar /app/
|
|
COPY bin/docker/run_metabase.sh /app/
|
|
|
|
# expose our default runtime port
|
|
EXPOSE 3000
|
|
|
|
# run it
|
|
ENTRYPOINT ["/app/run_metabase.sh"]
|