javier
dc6b22e648
This PR contains the work done to introduce a _Fluent_-based persistence layer for the Website service, selectable at runtime alongside the existing in-memory default, plus the local dev tooling and docs to support it. To provide further details about the work: * Persistence package * The `Driver` and `TLS` enumerations * The `Configuration` type * The `Service` factory that builds the service * `PrepareDB` for migrations registration * The `Probe` for readiness checks. * App integration * Builds the driver, registers migrations, and attaches `Fluent` to the service lifecycle so it starts/stops with the HTTP server. * Migrate-on-boot is gated to the in-memory backend; MySQL/MariaDB is migrated out of band via --database-migrate so shared databases never race on startup. * The `ConfigReader+Properties` extension maps database.* config keys onto the driver. * Library * Added database configuration constants. * The `HealthController` controller gains a readiness probe: `GET /health/ready` checks whether the database is reachable, separate from the existing liveness check. * Others * Updated the `docker-compose` files to support a database service behind a database profile, and hardened for local development * New database targets on the `Makefile` file and overall documentation updated * Updated the `.env.local`, `Dockerfile`, and `README` files to document the persistence workflow, config keys, and local DB commands Reviewed-on: rock-n-code/loud-amsterdam#13 Co-authored-by: Javier Cicchelli <javier@rock-n-code.com> Co-committed-by: Javier Cicchelli <javier@rock-n-code.com>
90 lines
3.5 KiB
Docker
90 lines
3.5 KiB
Docker
# ================================
|
|
# Build image
|
|
# ================================
|
|
FROM swift:6.3-noble AS build
|
|
|
|
# Install OS updates
|
|
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
&& apt-get -q update \
|
|
&& apt-get -q dist-upgrade -y \
|
|
&& apt-get install -y libjemalloc-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Set up a build area
|
|
WORKDIR /build
|
|
|
|
# First just resolve dependencies.
|
|
# This creates a cached layer that can be reused as long as the manifests do
|
|
# not change. The Website package depends on the local Localization package via
|
|
# a relative path, so its manifest must be present for resolution to succeed.
|
|
COPY ./Packages/Localization/Package.swift ./Packages/Localization/
|
|
COPY ./Packages/Persistence/Package.swift ./Packages/Persistence/
|
|
COPY ./Services/Website/Package.swift ./Services/Website/Package.resolved ./Services/Website/
|
|
RUN swift package --package-path ./Services/Website resolve
|
|
|
|
# Copy entire repo into container
|
|
COPY . .
|
|
|
|
# Build the application, with optimizations, with static linking, and using jemalloc
|
|
RUN swift build --package-path ./Services/Website -c release \
|
|
--product "Website" \
|
|
--static-swift-stdlib \
|
|
-Xlinker -ljemalloc
|
|
|
|
# Switch to the staging area
|
|
WORKDIR /staging
|
|
|
|
# Copy main executable to staging area
|
|
RUN cp "$(swift build --package-path /build/Services/Website -c release --show-bin-path)/Website" ./
|
|
|
|
# Copy static swift backtracer binary to staging area
|
|
RUN cp "/usr/libexec/swift/linux/swift-backtrace-static" ./
|
|
|
|
# Copy resources bundled by SPM to staging area
|
|
RUN find -L "$(swift build --package-path /build/Services/Website -c release --show-bin-path)/" -regex '.*\.resources$' -exec cp -Ra {} ./ \;
|
|
|
|
# Copy the static files directory (served by FileMiddleware) if it exists
|
|
# Ensure that by default, neither the directory nor any of its contents are writable.
|
|
RUN [ -d /build/Services/Website/Resources ] && { mv /build/Services/Website/Resources ./Resources && chmod -R a-w ./Resources; } || true
|
|
|
|
# ================================
|
|
# Run image
|
|
# ================================
|
|
FROM ubuntu:noble
|
|
|
|
# Make sure all system packages are up to date, and install only essential packages.
|
|
RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
&& apt-get -q update \
|
|
&& apt-get -q dist-upgrade -y \
|
|
&& apt-get -q install -y \
|
|
libjemalloc2 \
|
|
ca-certificates \
|
|
tzdata \
|
|
# If your app or its dependencies import FoundationNetworking, also install `libcurl4`.
|
|
# libcurl4 \
|
|
# If your app or its dependencies import FoundationXML, also install `libxml2`.
|
|
# libxml2 \
|
|
&& rm -r /var/lib/apt/lists/*
|
|
|
|
# Create a hummingbird user and group with /app as its home directory
|
|
RUN useradd --user-group --create-home --system --skel /dev/null --home-dir /app hummingbird
|
|
|
|
# Switch to the new home directory
|
|
WORKDIR /app
|
|
|
|
# Copy built executable and any staged resources from builder
|
|
COPY --from=build --chown=hummingbird:hummingbird /staging /app
|
|
|
|
# Provide configuration needed by the built-in crash reporter and some sensible default behaviors.
|
|
ENV SWIFT_BACKTRACE=enable=yes,sanitize=yes,threads=all,images=all,interactive=no,swift-backtrace=./swift-backtrace-static
|
|
|
|
# Ensure all further commands run as the hummingbird user
|
|
USER hummingbird:hummingbird
|
|
|
|
# Let Docker bind to port 8080
|
|
EXPOSE 8080
|
|
|
|
# Start the Hummingbird service when the image is run, default to listening on 8080 in production environment
|
|
ENTRYPOINT ["./Website"]
|
|
CMD ["--http-host", "0.0.0.0", "--http-port", "8080"]
|