z8run/Dockerfile at main · AdaWorldAPI/z8run · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# ============================================================
# z8run – Multi-stage Docker build
# Stage 1: Build Rust backend
# Stage 2: Build React frontend
# Stage 3: Minimal runtime image
# ============================================================

# ── Stage 1: Rust build ─────────────────────────────────────
FROM rust:1.91-bookworm AS backend-builder

WORKDIR /build

# Cache dependencies first
COPY Cargo.toml Cargo.lock ./
COPY crates/z8run-core/Cargo.toml       crates/z8run-core/Cargo.toml
COPY crates/z8run-api/Cargo.toml        crates/z8run-api/Cargo.toml
COPY crates/z8run-storage/Cargo.toml    crates/z8run-storage/Cargo.toml
COPY crates/z8run-runtime/Cargo.toml    crates/z8run-runtime/Cargo.toml
COPY bins/z8run-cli/Cargo.toml          bins/z8run-cli/Cargo.toml

# Create dummy src files so cargo can resolve deps
RUN mkdir -p crates/z8run-core/src      && echo "" > crates/z8run-core/src/lib.rs && \
    mkdir -p crates/z8run-api/src       && echo "" > crates/z8run-api/src/lib.rs && \
    mkdir -p crates/z8run-storage/src   && echo "" > crates/z8run-storage/src/lib.rs && \
    mkdir -p crates/z8run-runtime/src   && echo "" > crates/z8run-runtime/src/lib.rs && \
    mkdir -p bins/z8run-cli/src         && echo "fn main(){}" > bins/z8run-cli/src/main.rs

RUN cargo build --release --bin z8run 2>/dev/null || true

# Now copy real source and build
COPY crates/ crates/
COPY bins/   bins/

# Invalidate cargo cache for ALL crates (dummy libs must be recompiled)
RUN find crates/ bins/ -name "*.rs" -exec touch {} + && \
    cargo build --release --bin z8run

# ── Stage 2: Frontend build ─────────────────────────────────
FROM node:24-bookworm-slim AS frontend-builder

WORKDIR /build/frontend

COPY frontend/package.json frontend/package-lock.json* ./
RUN npm ci

COPY frontend/ .
RUN npm run build

# ── Stage 3: Runtime ────────────────────────────────────────
FROM debian:bookworm-slim AS runtime

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
        ca-certificates \
        libssl3 \
        curl \
    && rm -rf /var/lib/apt/lists/*

# Non-root user
RUN groupadd -r z8run && useradd -r -g z8run -m z8run

WORKDIR /app

# Copy binary
COPY --from=backend-builder /build/target/release/z8run /app/z8run

# Copy frontend build
COPY --from=frontend-builder /build/frontend/dist /app/frontend/dist

# Data directory
RUN mkdir -p /app/data /app/data/plugins && chown -R z8run:z8run /app

USER z8run

# Defaults
ENV Z8_PORT=7700 \
    Z8_BIND=0.0.0.0 \
    Z8_DATA_DIR=/app/data \
    Z8_LOG_LEVEL=info

EXPOSE 7700

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD curl -f http://localhost:7700/api/v1/health || exit 1

ENTRYPOINT ["/app/z8run"]
CMD ["serve"]