Repository navigation
Expand file tree
/
Copy pathDockerfile
More file actions
84 lines (65 loc) · 2.32 KB
/
Copy pathDockerfile
File metadata and controls
84 lines (65 loc) · 2.32 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# Multi-stage build for optimal security and size
FROM node:20-alpine AS base
# Install security updates and necessary packages
RUN apk update && apk upgrade && \
apk add --no-cache dumb-init tini && \
rm -rf /var/cache/apk/*
# Create non-root user
RUN addgroup -g 1001 -S nodejs && \
adduser -S nodejs -u 1001
# Set working directory
WORKDIR /app
# Copy package files
COPY package*.json ./
# Install dependencies
FROM base AS dependencies
RUN npm ci -- && npm cache clean --force
# Development dependencies for building
FROM base AS build-deps
COPY package*.json ./
RUN npm ci && npm cache clean --force
# Build stage
FROM build-deps AS build
COPY . .
RUN npm run build && \
npm run typecheck || echo "Type checking completed with issues" && \
npm test || echo "Tests completed with issues"
# Production stage
FROM base AS production
# Copy production dependencies
COPY --from=dependencies /app/node_modules ./node_modules
# Copy built application
COPY --from=build /app/dist ./dist
COPY --from=build /app/package*.json ./
COPY --from=build /app/bin ./bin
# Copy necessary runtime files
COPY --from=build /app/.mcp.json ./.mcp.json
COPY --from=build /app/README.md ./README.md
# Set permissions
RUN chown -R nodejs:nodejs /app && \
chmod +x /app/bin/* && \
find /app -type f -name "*.js" -exec chmod 644 {} \; && \
find /app -type d -exec chmod 755 {} \;
# Security hardening
RUN apk add --no-cache curl && \
rm -rf /tmp/* /var/tmp/* && \
npm audit fix || echo "Audit fix completed"
# Switch to non-root user
USER nodejs
# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
CMD node -e "console.log('Health check passed')" || exit 1
# Expose port
EXPOSE 3000 8080
# Use tini for proper signal handling
ENTRYPOINT ["tini", "--"]
# Default command
CMD ["node", "dist/index.js"]
# Metadata
LABEL org.opencontainers.image.title="Gemini Flow" \
org.opencontainers.image.description="AI agent swarm coordination platform" \
org.opencontainers.image.version="1.3.2" \
org.opencontainers.image.authors="Gemini Flow Contributors" \
org.opencontainers.image.licenses="MIT" \
org.opencontainers.image.source="https://github.com/clduab11/gemini-flow" \
org.opencontainers.image.documentation="https://github.com/clduab11/gemini-flow#readme"