33 lines
1.1 KiB
Docker
33 lines
1.1 KiB
Docker
# Stage 1: Build environment
|
|
FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
|
|
# 1. Explicitly run as root for the build stage
|
|
USER root
|
|
WORKDIR /src
|
|
|
|
# Copy the project file and restore dependencies
|
|
COPY ["LiteCharmsMessaging/LiteCharmsMessaging.csproj", "LiteCharmsMessaging/"]
|
|
RUN dotnet restore "LiteCharmsMessaging/LiteCharmsMessaging.csproj"
|
|
|
|
# Copy the rest of the source code
|
|
COPY . .
|
|
|
|
# Move to the project directory and build the release
|
|
WORKDIR "/src/LiteCharmsMessaging"
|
|
RUN dotnet build "LiteCharmsMessaging.csproj" -c Release -o /app/build
|
|
RUN dotnet publish "LiteCharmsMessaging.csproj" -c Release -o /app/publish /p:UseAppHost=false
|
|
|
|
# Stage 2: Runtime environment
|
|
FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS final
|
|
WORKDIR /app
|
|
|
|
# 2. Switch to the built-in non-root user ('app') before copying files
|
|
USER $APP_UID
|
|
|
|
# 3. Copy the published output and transfer ownership to the non-root user
|
|
COPY --chown=$APP_UID:$APP_UID --from=build /app/publish .
|
|
|
|
# .NET 8+ defaults to port 8080 for web apps running as non-root
|
|
EXPOSE 8080
|
|
|
|
# Start the application
|
|
ENTRYPOINT ["dotnet", "LiteCharmsMessaging.dll"] |