javier
698cd60521
This PR contains the work done for build-time optimization of the static assets served by the Website service. The production Docker image now ships minified JS/CSS and losslessly recompressed images, while the sources in the repository stay readable and un-minified. Reviewed-on: rock-n-code/loud-amsterdam#20 Co-authored-by: Javier Cicchelli <javier@rock-n-code.com> Co-committed-by: Javier Cicchelli <javier@rock-n-code.com>
120 lines
4.5 KiB
Docker
120 lines
4.5 KiB
Docker
# ================================
|
|
# Asset image
|
|
# ================================
|
|
FROM node:22-alpine AS assets
|
|
|
|
# Install the minifiers in their own layer, so they are cached across asset changes
|
|
RUN apk add --no-cache oxipng \
|
|
&& npm install --global esbuild svgo
|
|
|
|
# Copy the static files and minify the JS/CSS/SVG sources and losslessly recompress
|
|
# the PNG images in place, keeping their names so the URL paths derived from the
|
|
# StaticFile enumeration stay unchanged.
|
|
WORKDIR /static
|
|
COPY ./Services/Website/Resources/Static .
|
|
RUN esbuild --minify --allow-overwrite --outdir=css css/*.css \
|
|
&& esbuild --minify --allow-overwrite --outdir=js js/*.js \
|
|
&& oxipng --opt max --strip safe *.png \
|
|
&& svgo icon.svg
|
|
|
|
# Export stage: `docker build --target assets-export --output <dir>` writes the
|
|
# minified static files to <dir> for local inspection.
|
|
FROM scratch AS assets-export
|
|
COPY --from=assets /static /
|
|
|
|
# ================================
|
|
# Build image
|
|
# ================================
|
|
FROM swift:6.3-noble AS build
|
|
|
|
# Install OS updates
|
|
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
&& apt-get -q update \
|
|
&& apt-get -q dist-upgrade -y \
|
|
&& apt-get install -y libjemalloc-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Set up a build area
|
|
WORKDIR /build
|
|
|
|
# First just resolve dependencies.
|
|
# This creates a cached layer that can be reused as long as the manifests do
|
|
# not change. The Website package depends on the local Localization package via
|
|
# a relative path, so its manifest must be present for resolution to succeed.
|
|
COPY ./Packages/Localization/Package.swift ./Packages/Localization/
|
|
COPY ./Packages/Persistence/Package.swift ./Packages/Persistence/
|
|
COPY ./Packages/Web/Package.swift ./Packages/Web/
|
|
COPY ./Services/Website/Package.swift ./Services/Website/Package.resolved ./Services/Website/
|
|
RUN swift package --package-path ./Services/Website resolve
|
|
|
|
# Copy entire repo into container
|
|
COPY . .
|
|
|
|
# Build the application, with optimizations, with static linking, and using jemalloc
|
|
RUN swift build --package-path ./Services/Website -c release \
|
|
--product "Website" \
|
|
--static-swift-stdlib \
|
|
-Xlinker -ljemalloc
|
|
|
|
# Switch to the staging area
|
|
WORKDIR /staging
|
|
|
|
# Copy main executable to staging area
|
|
RUN cp "$(swift build --package-path /build/Services/Website -c release --show-bin-path)/Website" ./
|
|
|
|
# Copy static swift backtracer binary to staging area
|
|
RUN cp "/usr/libexec/swift/linux/swift-backtrace-static" ./
|
|
|
|
# Copy resources bundled by SPM to staging area
|
|
RUN find -L "$(swift build --package-path /build/Services/Website -c release --show-bin-path)/" -regex '.*\.resources$' -exec cp -Ra {} ./ \;
|
|
|
|
# Copy the static files directory (served by FileMiddleware) if it exists
|
|
RUN [ -d /build/Services/Website/Resources ] && mv /build/Services/Website/Resources ./Resources || true
|
|
|
|
# Overwrite the static files with the minified copies from the assets stage
|
|
COPY --from=assets /static ./Resources/Static
|
|
|
|
# Ensure that by default, neither the directory nor any of its contents are writable.
|
|
RUN chmod -R a-w ./Resources
|
|
|
|
# ================================
|
|
# Run image
|
|
# ================================
|
|
FROM ubuntu:noble
|
|
|
|
# Make sure all system packages are up to date, and install only essential packages.
|
|
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
&& apt-get -q update \
|
|
&& apt-get -q dist-upgrade -y \
|
|
&& apt-get -q install -y \
|
|
libjemalloc2 \
|
|
ca-certificates \
|
|
tzdata \
|
|
# If your app or its dependencies import FoundationNetworking, also install `libcurl4`.
|
|
# libcurl4 \
|
|
# If your app or its dependencies import FoundationXML, also install `libxml2`.
|
|
# libxml2 \
|
|
&& rm -r /var/lib/apt/lists/*
|
|
|
|
# Create a hummingbird user and group with /app as its home directory
|
|
RUN useradd --user-group --create-home --system --skel /dev/null --home-dir /app hummingbird
|
|
|
|
# Switch to the new home directory
|
|
WORKDIR /app
|
|
|
|
# Copy built executable and any staged resources from builder
|
|
COPY --from=build --chown=hummingbird:hummingbird /staging /app
|
|
|
|
# Provide configuration needed by the built-in crash reporter and some sensible default behaviors.
|
|
ENV SWIFT_BACKTRACE=enable=yes,sanitize=yes,threads=all,images=all,interactive=no,swift-backtrace=./swift-backtrace-static
|
|
|
|
# Ensure all further commands run as the hummingbird user
|
|
USER hummingbird:hummingbird
|
|
|
|
# Let Docker bind to port 8080
|
|
EXPOSE 8080
|
|
|
|
# Start the Hummingbird service when the image is run, default to listening on 8080 in production environment
|
|
ENTRYPOINT ["./Website"]
|
|
CMD ["--http-host", "0.0.0.0", "--http-port", "8080"]
|