-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add multi images and update Rust version to 1.74
- Loading branch information
Showing
10 changed files
with
280 additions
and
6 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,20 @@ | ||
# Copyright (c) Microsoft Corporation. | ||
# Licensed under the MIT license. | ||
# SPDX-License-Identifier: MIT | ||
|
||
# syntax=docker/dockerfile:1 | ||
|
||
# Comments are provided throughout this file to help you get started. | ||
# If you need more help, visit the Dockerfile reference guide at | ||
# https://docs.docker.com/engine/reference/builder/ | ||
|
||
################################################################################ | ||
# Create a stage for building the application. | ||
|
||
FROM --platform=$TARGETPLATFORM docker.io/library/eclipse-mosquitto | ||
WORKDIR /mosquitto/config | ||
|
||
COPY ./pub-sub-service/src/connectors/mosquitto.conf ./mosquitto.conf | ||
|
||
# Expose the port that the mqtt broker listens on. | ||
EXPOSE 1883 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,115 @@ | ||
# Copyright (c) Microsoft Corporation. | ||
# Licensed under the MIT license. | ||
# SPDX-License-Identifier: MIT | ||
|
||
# syntax=docker/dockerfile:1 | ||
|
||
# Comments are provided throughout this file to help you get started. | ||
# If you need more help, visit the Dockerfile reference guide at | ||
# https://docs.docker.com/engine/reference/builder/ | ||
|
||
################################################################################ | ||
# Create a stage for building the application. | ||
|
||
ARG RUST_VERSION=1.74 | ||
ARG APP_NAME=pub-sub-service | ||
ARG UID=10001 | ||
|
||
FROM --platform=$BUILDPLATFORM docker.io/library/rust:${RUST_VERSION} AS build | ||
|
||
# Target architecture to cross-compile | ||
ARG TARGETARCH | ||
|
||
ARG APP_NAME | ||
WORKDIR /sdv | ||
|
||
COPY ./ . | ||
|
||
# Check that APP_NAME argument is valid. | ||
RUN /sdv/container/scripts/argument_sanitizer.sh \ | ||
--arg-value "${APP_NAME}" \ | ||
--regex "^[a-zA-Z_0-9-]+$" || \ | ||
( echo "Argument sanitizer failed for ARG 'APP_NAME'"; exit 1 ) | ||
|
||
# Check that TARGETARCH argument is valid. | ||
RUN /sdv/container/scripts/argument_sanitizer.sh \ | ||
--arg-value "${TARGETARCH}" \ | ||
--regex "^[a-zA-Z_0-9-]+$" || \ | ||
( echo "Argument sanitizer failed for ARG 'TARGETARCH'"; exit 1 ) | ||
|
||
# Add Build dependencies. | ||
RUN apt update && apt upgrade -y && apt install -y \ | ||
cmake \ | ||
libssl-dev \ | ||
pkg-config \ | ||
protobuf-compiler | ||
|
||
# Based on the target architecture, add the appropriate build target and build service. | ||
RUN if [ "$TARGETARCH" = "amd64" ]; then \ | ||
CARGOARCH="x86_64-unknown-linux-gnu"; \ | ||
elif [ "$TARGETARCH" = "arm64" ]; then \ | ||
apt install -y gcc-aarch64-linux-gnu; \ | ||
CARGOARCH="aarch64-unknown-linux-gnu"; \ | ||
else \ | ||
echo "Unsupported cross-compile architecture"; \ | ||
exit 1; \ | ||
fi; \ | ||
rustup target add ${CARGOARCH}; \ | ||
cargo build --release --target=${CARGOARCH} -p "${APP_NAME}"; \ | ||
cp /sdv/target/${CARGOARCH}/release/"${APP_NAME}" /sdv/service | ||
|
||
################################################################################ | ||
# Create a new stage for running the application that contains the minimal | ||
# runtime dependencies for the application. This often uses a different base | ||
# image from the build stage where the necessary files are copied from the build | ||
# stage. | ||
# | ||
# The example below uses the debian bullseye image as the foundation for running the app. | ||
# By specifying the "bullseye-slim" tag, it will also use whatever happens to be the | ||
# most recent version of that tag when you build your Dockerfile. If | ||
# reproducability is important, consider using a digest | ||
# (e.g., debian@sha256:ac707220fbd7b67fc19b112cee8170b41a9e97f703f588b2cdbbcdcecdd8af57). | ||
FROM --platform=$TARGETPLATFORM docker.io/library/debian:bullseye-slim AS final | ||
ARG UID | ||
|
||
# Copy container scripts. | ||
COPY ./container/scripts/*.sh /sdv/scripts/ | ||
|
||
# Check that UID argument is valid. | ||
RUN /sdv/scripts/argument_sanitizer.sh \ | ||
--arg-value "${UID}" \ | ||
--regex "^[0-9]+$" || \ | ||
( echo "Argument sanitizer failed for ARG 'UID'"; exit 1 ) | ||
|
||
# Create a non-privileged user that the app will run under. | ||
# See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user | ||
RUN adduser \ | ||
--disabled-password \ | ||
--gecos "" \ | ||
--home "/nonexistent" \ | ||
--shell "/sbin/nologin" \ | ||
--no-create-home \ | ||
--uid "${UID}" \ | ||
appuser | ||
|
||
# Create and add user ownership to config directory. | ||
RUN mkdir -p /sdv/.agemo/config | ||
RUN chown appuser /sdv/.agemo/config | ||
|
||
# Create mnt directory to copy override configs into. | ||
RUN mkdir -p /mnt/config | ||
|
||
USER appuser | ||
|
||
WORKDIR /sdv | ||
|
||
ENV AGEMO_HOME=/sdv/.agemo | ||
|
||
# Copy the executable from the "build" stage. | ||
COPY --from=build /sdv/service /sdv/ | ||
|
||
# Expose the port that the application listens on. | ||
EXPOSE 50051 | ||
|
||
# What the container should run when it is started. | ||
CMD ["/sdv/scripts/container_startup.sh"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,118 @@ | ||
# Copyright (c) Microsoft Corporation. | ||
# Licensed under the MIT license. | ||
# SPDX-License-Identifier: MIT | ||
|
||
# syntax=docker/dockerfile:1 | ||
|
||
# Comments are provided throughout this file to help you get started. | ||
# If you need more help, visit the Dockerfile reference guide at | ||
# https://docs.docker.com/engine/reference/builder/ | ||
|
||
################################################################################ | ||
# Create a stage for building the application. | ||
|
||
ARG RUST_VERSION=1.74 | ||
ARG APP_NAME=pub-sub-service | ||
ARG UID=10001 | ||
|
||
FROM --platform=$BUILDPLATFORM docker.io/library/rust:${RUST_VERSION} AS build | ||
|
||
# Target architecture to cross-compile | ||
ARG TARGETARCH | ||
|
||
ARG APP_NAME | ||
WORKDIR /sdv | ||
|
||
COPY ./ . | ||
|
||
# Check that APP_NAME argument is valid. | ||
RUN /sdv/container/scripts/argument_sanitizer.sh \ | ||
--arg-value "${APP_NAME}" \ | ||
--regex "^[a-zA-Z_0-9-]+$" || \ | ||
( echo "Argument sanitizer failed for ARG 'APP_NAME'"; exit 1 ) | ||
|
||
# Check that TARGETARCH argument is valid. | ||
RUN /sdv/container/scripts/argument_sanitizer.sh \ | ||
--arg-value "${TARGETARCH}" \ | ||
--regex "^[a-zA-Z_0-9-]+$" || \ | ||
( echo "Argument sanitizer failed for ARG 'TARGETARCH'"; exit 1 ) | ||
|
||
# Add Build dependencies. | ||
RUN apt update && apt upgrade -y && apt install -y \ | ||
cmake \ | ||
libssl-dev \ | ||
pkg-config \ | ||
protobuf-compiler | ||
|
||
# Based on the target architecture, add the appropriate build target and build service. | ||
RUN if [ "$TARGETARCH" = "amd64" ]; then \ | ||
CARGOARCH="x86_64-unknown-linux-gnu"; \ | ||
elif [ "$TARGETARCH" = "arm64" ]; then \ | ||
apt install -y gcc-aarch64-linux-gnu; \ | ||
CARGOARCH="aarch64-unknown-linux-gnu"; \ | ||
else \ | ||
echo "Unsupported cross-compile architecture"; \ | ||
exit 1; \ | ||
fi; \ | ||
rustup target add ${CARGOARCH}; \ | ||
cargo build --release --target=${CARGOARCH} -p "${APP_NAME}"; \ | ||
cp /sdv/target/${CARGOARCH}/release/"${APP_NAME}" /sdv/service | ||
|
||
################################################################################ | ||
# Create a new stage for running the application that contains the minimal | ||
# runtime dependencies for the application. This often uses a different base | ||
# image from the build stage where the necessary files are copied from the build | ||
# stage. | ||
# | ||
# The example below uses the debian bullseye image as the foundation for running the app. | ||
# By specifying the "bullseye-slim" tag, it will also use whatever happens to be the | ||
# most recent version of that tag when you build your Dockerfile. If | ||
# reproducability is important, consider using a digest | ||
# (e.g., debian@sha256:ac707220fbd7b67fc19b112cee8170b41a9e97f703f588b2cdbbcdcecdd8af57). | ||
FROM --platform=$TARGETPLATFORM docker.io/library/debian:bullseye-slim AS final | ||
ARG UID | ||
|
||
# Copy container scripts. | ||
COPY ./container/scripts/*.sh /sdv/scripts/ | ||
|
||
# Check that UID argument is valid. | ||
RUN /sdv/scripts/argument_sanitizer.sh \ | ||
--arg-value "${UID}" \ | ||
--regex "^[0-9]+$" || \ | ||
( echo "Argument sanitizer failed for ARG 'UID'"; exit 1 ) | ||
|
||
# Create a non-privileged user that the app will run under. | ||
# See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user | ||
RUN adduser \ | ||
--disabled-password \ | ||
--gecos "" \ | ||
--home "/nonexistent" \ | ||
--shell "/sbin/nologin" \ | ||
--no-create-home \ | ||
--uid "${UID}" \ | ||
appuser | ||
|
||
# Create and add user ownership to config directory. | ||
RUN mkdir -p /sdv/.agemo/config | ||
RUN chown appuser /sdv/.agemo/config | ||
|
||
# Create mnt directory to copy override configs into. | ||
RUN mkdir -p /mnt/config | ||
|
||
USER appuser | ||
|
||
WORKDIR /sdv | ||
|
||
ENV AGEMO_HOME=/sdv/.agemo | ||
|
||
# Copy the executable from the "build" stage. | ||
COPY --from=build /sdv/service /sdv/ | ||
|
||
# Copy the "integrated" config to the override config folder and rename it to what agemo expects | ||
COPY --from=build /sdv/config/pub_sub_service_settings.integrated.yaml /sdv/.agemo/config/pub_sub_service_settings.yaml | ||
|
||
# Expose the port that the application listens on. | ||
EXPOSE 50051 | ||
|
||
# What the container should run when it is started. | ||
CMD ["/sdv/scripts/container_startup.sh"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters