Jorge Manrubia
4aa1cef99d
Embedded PDF previewing isnt' reliable (not working in Safari with active storage). Instead let's align the editor with Active Storage previews and support pdf previews
69 lines
2.2 KiB
Docker
69 lines
2.2 KiB
Docker
# syntax = docker/dockerfile:1
|
|
|
|
# Make sure RUBY_VERSION matches the Ruby version in .ruby-version and Gemfile
|
|
ARG RUBY_VERSION=3.4.2
|
|
FROM registry.docker.com/library/ruby:$RUBY_VERSION-slim AS base
|
|
|
|
# Rails app lives here
|
|
WORKDIR /rails
|
|
|
|
# Set production environment
|
|
ENV RAILS_ENV="production" \
|
|
BUNDLE_DEPLOYMENT="1" \
|
|
BUNDLE_PATH="/usr/local/bundle" \
|
|
BUNDLE_WITHOUT="development"
|
|
|
|
|
|
# Throw-away build stage to reduce size of final image
|
|
FROM base AS build
|
|
|
|
# Install packages needed to build gems
|
|
RUN apt-get update -qq && \
|
|
apt-get install --no-install-recommends -y build-essential git libvips pkg-config libyaml-dev
|
|
|
|
# Install application gems
|
|
COPY Gemfile Gemfile.lock .ruby-version ./
|
|
RUN --mount=type=secret,id=GITHUB_TOKEN \
|
|
BUNDLE_GITHUB__COM="$(cat /run/secrets/GITHUB_TOKEN):x-oauth-basic" bundle install && \
|
|
rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
|
|
bundle exec bootsnap precompile --gemfile
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
|
|
# Precompile bootsnap code for faster boot times
|
|
RUN bundle exec bootsnap precompile app/ lib/
|
|
|
|
# Precompiling assets for production without requiring secret RAILS_MASTER_KEY
|
|
RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile
|
|
|
|
|
|
# Fetch beamer library
|
|
FROM basecamp/beamer:latest AS beamer
|
|
|
|
|
|
# Final stage for app image
|
|
FROM base
|
|
|
|
# Install packages needed for deployment
|
|
RUN apt-get update -qq && \
|
|
apt-get install --no-install-recommends -y curl libsqlite3-0 libvips build-essential ffmpeg groff libreoffice-writer libreoffice-impress libreoffice-calc mupdf-tools && \
|
|
rm -rf /var/lib/apt/lists /var/cache/apt/archives
|
|
|
|
# Copy built artifacts: gems, application
|
|
COPY --from=build /usr/local/bundle /usr/local/bundle
|
|
COPY --from=build /rails /rails
|
|
COPY --from=beamer /home/beamer/bin/beamer.so /rails/bin/lib/beamer.so
|
|
|
|
# Run and own only the runtime files as a non-root user for security
|
|
RUN useradd rails --create-home --shell /bin/bash && \
|
|
chown -R rails:rails db log storage tmp
|
|
USER rails:rails
|
|
|
|
# Entrypoint prepares the database.
|
|
ENTRYPOINT ["/rails/bin/docker-entrypoint"]
|
|
|
|
# Start the server by default, this can be overwritten at runtime
|
|
EXPOSE 80 443
|
|
CMD ["./bin/thrust", "./bin/rails", "server"]
|