Claude
5dc8a4f2f1
- Multi-arch (amd64/arm64) panel image: static musl binary on scratch, cross-compiled with cargo-zigbuild (no QEMU), non-root, healthcheck - docker-compose.yml + .env.example for one-command deployment - CI: fmt, clippy, tests, web type-checks, Windows launcher build, real-network installs of vanilla/Fabric/Quilt/Forge/NeoForge, Docker build - Release: Windows NSIS installer with baked-in panel URL, GHCR image push and GitHub release (tag push or manual dispatch) - README, admin guide, Microsoft auth setup, architecture, development - rustfmt config and formatting pass Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011ARcGWxLx21FwXJ3yfGriS
56 lines
2.5 KiB
Docker
56 lines
2.5 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
#
|
|
# ScopeNet admin panel — a single static binary + the web UI on `scratch`.
|
|
# Multi-arch (amd64/arm64) is cross-compiled with cargo-zigbuild on the
|
|
# build machine's native arch, so no slow QEMU emulation is needed.
|
|
|
|
# ---- 1. Web UI ---------------------------------------------------------------
|
|
FROM --platform=$BUILDPLATFORM node:22-alpine AS web
|
|
WORKDIR /src/panel/web
|
|
COPY panel/web/package.json panel/web/package-lock.json ./
|
|
RUN npm ci --no-audit --no-fund
|
|
COPY panel/web/ ./
|
|
RUN npm run build
|
|
|
|
# ---- 2. Server binary --------------------------------------------------------
|
|
FROM --platform=$BUILDPLATFORM rust:1-slim-bookworm AS build
|
|
ARG TARGETARCH
|
|
# zig (via the cargo-zigbuild wheel) is the cross C toolchain for musl targets.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends python3-pip \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& pip install --no-cache-dir --break-system-packages cargo-zigbuild
|
|
RUN case "$TARGETARCH" in \
|
|
amd64) echo x86_64-unknown-linux-musl ;; \
|
|
arm64) echo aarch64-unknown-linux-musl ;; \
|
|
*) echo "unsupported arch $TARGETARCH" >&2; exit 1 ;; \
|
|
esac > /rust-target \
|
|
&& rustup target add "$(cat /rust-target)"
|
|
WORKDIR /src
|
|
COPY . .
|
|
# No --locked: release builds stamp the version into Cargo.toml. Dependencies
|
|
# stay pinned by Cargo.lock either way (CI enforces --locked).
|
|
RUN --mount=type=cache,target=/usr/local/cargo/registry,id=cargo-registry \
|
|
--mount=type=cache,target=/src/target,id=scopenet-target-$TARGETARCH \
|
|
cargo zigbuild --release -p scopenet-panel --target "$(cat /rust-target)" \
|
|
&& cp "target/$(cat /rust-target)/release/scopenet-panel" /scopenet-panel
|
|
# Data dir owned by the non-root runtime user.
|
|
RUN mkdir -p /out/data && chown 65532:65532 /out/data
|
|
|
|
# ---- 3. Runtime --------------------------------------------------------------
|
|
FROM scratch
|
|
LABEL org.opencontainers.image.title="ScopeNet Panel" \
|
|
org.opencontainers.image.description="Admin panel for the ScopeNet Minecraft launcher" \
|
|
org.opencontainers.image.source="https://github.com/scopeddlol/SCOPENET-MC"
|
|
COPY --from=build /scopenet-panel /scopenet-panel
|
|
COPY --from=web /src/panel/web/dist /web
|
|
COPY --from=build --chown=65532:65532 /out/data /data
|
|
ENV SCOPENET_BIND=0.0.0.0:8080 \
|
|
SCOPENET_DATA_DIR=/data \
|
|
SCOPENET_WEB_DIR=/web \
|
|
RUST_LOG=info
|
|
USER 65532:65532
|
|
VOLUME ["/data"]
|
|
EXPOSE 8080
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 CMD ["/scopenet-panel", "healthcheck"]
|
|
ENTRYPOINT ["/scopenet-panel"]
|