invidious/docker/Dockerfile

FROM crystallang/crystal:1.1.1-alpine AS builder
RUN apk add --no-cache sqlite-static yaml-static

WORKDIR /invidious
COPY ./shard.yml ./shard.yml
COPY ./shard.lock ./shard.lock
RUN shards install

COPY --from=quay.io/invidious/lsquic-compiled /root/liblsquic.a ./lib/lsquic/src/lsquic/ext/liblsquic.a

COPY ./src/ ./src/
# TODO: .git folder is required for building – this is destructive.
# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
COPY ./.git/ ./.git/

RUN crystal spec --warnings all \
    --link-flags "-lxml2 -llzma"

RUN crystal build ./src/invidious.cr \
    --static --warnings all \
    --link-flags "-lxml2 -llzma"

FROM alpine:latest
RUN apk add --no-cache librsvg ttf-opensans
WORKDIR /invidious
RUN addgroup -g 1000 -S invidious && \
    adduser -u 1000 -S invidious -G invidious
COPY ./assets/ ./assets/
COPY --chown=invidious ./config/config.* ./config/
RUN mv -n config/config.example.yml config/config.yml
RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
COPY ./config/sql/ ./config/sql/
COPY ./locales/ ./locales/
COPY --from=builder /invidious/invidious .
RUN chmod o+rX -R ./assets ./config ./locales

EXPOSE 3000
USER invidious
CMD [ "/invidious/invidious" ]
-												Update crystal docker image to 1.1.1
											
										
										
											2021-08-13 12:14:44 +05:30
+								FROM crystallang/crystal:1.1.1-alpine AS builder
-												Include liblsquic build in dockerfile + add support for ARM64 on Docker (#2147)

Co-authored-by: Emilien Devos <contact@emiliendevos.be>
											
										
										
											2021-07-16 03:27:20 +05:30
+								RUN apk add --no-cache sqlite-static yaml-static
-												basic docker-compose cluster

											
										
										
											2018-09-26 13:16:08 +05:30
+								WORKDIR /invidious
-												Verify download, fix invidious file permission (#949)

* Fix docker
											
										
										
											2020-05-01 07:05:34 +05:30
+								COPY ./shard.yml ./shard.yml
-												Untrack config.yml (#1557)

* Untrack config.yml

`config/config.yml` has been untracked and moved to `config/config.example.yml`.

The Dockerfile has been updated to copy all `config/config.*` files and to try
to move `config/config.example.yml` to `config/config.yml`. If a user supplied
`config/config.yml` exists it is not overwritten.

* Update Dockerfile to use `shard.lock`

* Fix tests
											
										
										
											2020-12-10 12:48:30 +05:30
+								COPY ./shard.lock ./shard.lock
-												Include liblsquic build in dockerfile + add support for ARM64 on Docker (#2147)

Co-authored-by: Emilien Devos <contact@emiliendevos.be>
											
										
										
											2021-07-16 03:27:20 +05:30
+								RUN shards install
-												use pre-compiled lsquic docker image
from https://quay.io/repository/invidious/lsquic-compiled
fixes #2325

											
										
										
											2021-08-25 02:42:19 +05:30
+								COPY --from=quay.io/invidious/lsquic-compiled /root/liblsquic.a ./lib/lsquic/src/lsquic/ext/liblsquic.a
-												Include liblsquic build in dockerfile + add support for ARM64 on Docker (#2147)

Co-authored-by: Emilien Devos <contact@emiliendevos.be>
											
										
										
											2021-07-16 03:27:20 +05:30
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								COPY ./src/ ./src/
 								# TODO: .git folder is required for building – this is destructive.
 								# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
 								COPY ./.git/ ./.git/
-												Add CI for testing arm64 docker (#2315)

* Add CI for testing build of docker-arm64

* Add specs check to dockerfiles
											
										
										
											2021-08-10 11:04:52 +05:30
 								RUN crystal spec --warnings all \
 								    --link-flags "-lxml2 -llzma"
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								RUN crystal build ./src/invidious.cr \
-												Switch to official crystallang alpine image (#1247)

* Switch to official crystal-lang alpine image
											
										
										
											2020-06-17 04:34:41 +05:30
+								    --static --warnings all \
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								    --link-flags "-lxml2 -llzma"
-												basic docker-compose cluster

											
										
										
											2018-09-26 13:16:08 +05:30
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								FROM alpine:latest
-												Remove dependency on ImageMagick (replace with rsvg-convert)

											
										
										
											2019-10-28 20:16:59 +05:30
+								RUN apk add --no-cache librsvg ttf-opensans
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								WORKDIR /invidious
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								RUN addgroup -g 1000 -S invidious && \
 								    adduser -u 1000 -S invidious -G invidious
-												Revert "Set correct permissions in Dockerfile"

											
										
										
											2021-05-09 15:56:08 +05:30
+								COPY ./assets/ ./assets/
-												Untrack config.yml (#1557)

* Untrack config.yml

`config/config.yml` has been untracked and moved to `config/config.example.yml`.

The Dockerfile has been updated to copy all `config/config.*` files and to try
to move `config/config.example.yml` to `config/config.yml`. If a user supplied
`config/config.yml` exists it is not overwritten.

* Update Dockerfile to use `shard.lock`

* Fix tests
											
										
										
											2020-12-10 12:48:30 +05:30
+								COPY --chown=invidious ./config/config.* ./config/
 								RUN mv -n config/config.example.yml config/config.yml
-												Verify download, fix invidious file permission (#949)

* Fix docker
											
										
										
											2020-05-01 07:05:34 +05:30
+								RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
-												Revert "Set correct permissions in Dockerfile"

											
										
										
											2021-05-09 15:56:08 +05:30
+								COPY ./config/sql/ ./config/sql/
 								COPY ./locales/ ./locales/
-												Proper fix for docker build

return to static linking
											
										
										
											2019-11-27 04:50:23 +05:30
+								COPY --from=builder /invidious/invidious .
-												make assets, config and locales readable only
											
										
										
											2021-05-09 15:59:06 +05:30
+								RUN chmod o+rX -R ./assets ./config ./locales
-												Verify download, fix invidious file permission (#949)

* Fix docker
											
										
										
											2020-05-01 07:05:34 +05:30
-												add EXPOSE port command in Dockerfile (#1568)

added EXPOSE (see https://docs.docker.com/engine/reference/builder/#expose) in the Dockerfile. With this the reverse proxy Traefik can detect the port automatically.
											
										
										
											2020-12-14 00:19:54 +05:30
+								EXPOSE 3000
-												docker: various improvements to Dockerfile

This includes the following changes:

- Use multi-stage build to run application in an optimized environment, see
  https://docs.docker.com/develop/develop-images/multistage-build/
- Run application on alpine instead of archlinux to further reduce image size
- Build Crystal application with --release for improved runtime performance
- Run application as non-root user for better security, see
  https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
- Only rebuild Docker layers when required

											
										
										
											2019-08-01 16:19:12 +05:30
+								USER invidious
-												basic docker-compose cluster

											
										
										
											2018-09-26 13:16:08 +05:30
+								CMD [ "/invidious/invidious" ]