Kevin McConnell
91df76928b
The setup here is a bit rough while we settle some of the details, but the gist of it is: - Define accessories to run the primary/replica processes - Add a web-replica role, which is similar to web but has the replication-side accessory - Load the beamer extension on the app's primary tenanted database Note that we aren't sending any traffic into the replica yet, but it would be functional to do so. This stage is mainly about testing the database replication.
69 lines
2.1 KiB
Docker
69 lines
2.1 KiB
Docker
# syntax = docker/dockerfile:1
|
|
|
|
# Make sure RUBY_VERSION matches the Ruby version in .ruby-version and Gemfile
|
|
ARG RUBY_VERSION=3.4.2
|
|
FROM registry.docker.com/library/ruby:$RUBY_VERSION-slim AS base
|
|
|
|
# Rails app lives here
|
|
WORKDIR /rails
|
|
|
|
# Set production environment
|
|
ENV RAILS_ENV="production" \
|
|
BUNDLE_DEPLOYMENT="1" \
|
|
BUNDLE_PATH="/usr/local/bundle" \
|
|
BUNDLE_WITHOUT="development"
|
|
|
|
|
|
# Throw-away build stage to reduce size of final image
|
|
FROM base AS build
|
|
|
|
# Install packages needed to build gems
|
|
RUN apt-get update -qq && \
|
|
apt-get install --no-install-recommends -y build-essential git libvips pkg-config libyaml-dev
|
|
|
|
# Install application gems
|
|
COPY Gemfile Gemfile.lock .ruby-version ./
|
|
RUN --mount=type=secret,id=GITHUB_TOKEN \
|
|
BUNDLE_GITHUB__COM="$(cat /run/secrets/GITHUB_TOKEN):x-oauth-basic" bundle install && \
|
|
rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
|
|
bundle exec bootsnap precompile --gemfile
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
|
|
# Precompile bootsnap code for faster boot times
|
|
RUN bundle exec bootsnap precompile app/ lib/
|
|
|
|
# Precompiling assets for production without requiring secret RAILS_MASTER_KEY
|
|
RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile
|
|
|
|
|
|
# Fetch beamer library
|
|
FROM basecamp/beamer:latest AS beamer
|
|
|
|
|
|
# Final stage for app image
|
|
FROM base
|
|
|
|
# Install packages needed for deployment
|
|
RUN apt-get update -qq && \
|
|
apt-get install --no-install-recommends -y curl libsqlite3-0 libvips && \
|
|
rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
|
|
|
# Copy built artifacts: gems, application
|
|
COPY --from=build /usr/local/bundle /usr/local/bundle
|
|
COPY --from=build /rails /rails
|
|
COPY --from=beamer /home/beamer/bin/beamer.so /rails/bin/lib/beamer.so
|
|
|
|
# Run and own only the runtime files as a non-root user for security
|
|
RUN useradd rails --create-home --shell /bin/bash && \
|
|
chown -R rails:rails db log storage tmp
|
|
USER rails:rails
|
|
|
|
# Entrypoint prepares the database.
|
|
ENTRYPOINT ["/rails/bin/docker-entrypoint"]
|
|
|
|
# Start the server by default, this can be overwritten at runtime
|
|
EXPOSE 80 443
|
|
CMD ["./bin/thrust", "./bin/rails", "server"]
|