javier
08b210e7c6
This PR contains the work done to add and setup the *Website* service target, a **Hummingbird** server app, into the Xcode project as a SwiftPM package with full support for containerization and driven by a `Makefile` file. To provide further details about the work done: * Swift package — SwiftPM manifest with a Website executable, related library, and test targets; depends on **hummingbird** and **swift-configuration**. * Containerization — Multi-stage `Dockerfile` producing a static-linked release build with jemalloc, running as a non-root user on port 8080. Production and local-dev `docker-compose` files included. * Configuration — `.env.local` template (with `.env` git-ignored) and `.dockerignore`/`.gitignore` entries. * Makefile — Self-documenting operational commands: * pkg — SwiftPM: _build, release, test, clean, reset, deps, outdated, update_ * img — Docker lifecycle: _build, mount, unmount, release_ Notes * New service only — no changes to existing code; nothing else in the repo is affected. * App logic is currently scaffolding; this PR establishes the service structure, build, and deployment tooling. Reviewed-on: rock-n-code/loud-amsterdam#2 Co-authored-by: Javier Cicchelli <javier@rock-n-code.com> Co-committed-by: Javier Cicchelli <javier@rock-n-code.com>
88 lines
3.0 KiB
Docker
88 lines
3.0 KiB
Docker
# ================================
|
|
# Build image
|
|
# ================================
|
|
FROM swift:6.3-noble AS build
|
|
|
|
# Install OS updates
|
|
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
&& apt-get -q update \
|
|
&& apt-get -q dist-upgrade -y \
|
|
&& apt-get install -y libjemalloc-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Set up a build area
|
|
WORKDIR /build
|
|
|
|
# First just resolve dependencies.
|
|
# This creates a cached layer that can be reused
|
|
# as long as your Package.swift/Package.resolved
|
|
# files do not change.
|
|
COPY ./Package.* ./
|
|
RUN swift package resolve
|
|
|
|
# Copy entire repo into container
|
|
COPY . .
|
|
|
|
# Build the application, with optimizations, with static linking, and using jemalloc
|
|
RUN swift build -c release \
|
|
--product "Website" \
|
|
--static-swift-stdlib \
|
|
-Xlinker -ljemalloc
|
|
|
|
# Switch to the staging area
|
|
WORKDIR /staging
|
|
|
|
# Copy main executable to staging area
|
|
RUN cp "$(swift build --package-path /build -c release --show-bin-path)/Website" ./
|
|
|
|
# Copy static swift backtracer binary to staging area
|
|
RUN cp "/usr/libexec/swift/linux/swift-backtrace-static" ./
|
|
|
|
# Copy resources bundled by SPM to staging area
|
|
RUN find -L "$(swift build --package-path /build -c release --show-bin-path)/" -regex '.*\.resources$' -exec cp -Ra {} ./ \;
|
|
|
|
# Copy any resouces from the public directory and views directory if the directories exist
|
|
# Ensure that by default, neither the directory nor any of its contents are writable.
|
|
RUN [ -d /build/public ] && { mv /build/public ./public && chmod -R a-w ./public; } || true
|
|
|
|
# ================================
|
|
# Run image
|
|
# ================================
|
|
FROM ubuntu:noble
|
|
|
|
# Make sure all system packages are up to date, and install only essential packages.
|
|
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
&& apt-get -q update \
|
|
&& apt-get -q dist-upgrade -y \
|
|
&& apt-get -q install -y \
|
|
libjemalloc2 \
|
|
ca-certificates \
|
|
tzdata \
|
|
# If your app or its dependencies import FoundationNetworking, also install `libcurl4`.
|
|
# libcurl4 \
|
|
# If your app or its dependencies import FoundationXML, also install `libxml2`.
|
|
# libxml2 \
|
|
&& rm -r /var/lib/apt/lists/*
|
|
|
|
# Create a hummingbird user and group with /app as its home directory
|
|
RUN useradd --user-group --create-home --system --skel /dev/null --home-dir /app hummingbird
|
|
|
|
# Switch to the new home directory
|
|
WORKDIR /app
|
|
|
|
# Copy built executable and any staged resources from builder
|
|
COPY --from=build --chown=hummingbird:hummingbird /staging /app
|
|
|
|
# Provide configuration needed by the built-in crash reporter and some sensible default behaviors.
|
|
ENV SWIFT_BACKTRACE=enable=yes,sanitize=yes,threads=all,images=all,interactive=no,swift-backtrace=./swift-backtrace-static
|
|
|
|
# Ensure all further commands run as the hummingbird user
|
|
USER hummingbird:hummingbird
|
|
|
|
# Let Docker bind to port 8080
|
|
EXPOSE 8080
|
|
|
|
# Start the Hummingbird service when the image is run, default to listening on 8080 in production environment
|
|
ENTRYPOINT ["./Website"]
|
|
CMD ["--http-host", "0.0.0.0", "--http-port", "8080"]
|