Created
October 29, 2024 11:14
-
-
Save tagliala/76389ab9c5c5cc1c178395718bc3da7f to your computer and use it in GitHub Desktop.
Default Rails 8 RC dockerfile
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# syntax=docker/dockerfile:1 | |
# check=error=true | |
# This Dockerfile is designed for production, not development. Use with Kamal or build'n'run by hand: | |
# docker build -t rails8 . | |
# docker run -d -p 80:80 -e RAILS_MASTER_KEY=<value from config/master.key> --name rails8 rails8 | |
# For a containerized dev environment, see Dev Containers: https://guides.rubyonrails.org/getting_started_with_devcontainer.html | |
# Make sure RUBY_VERSION matches the Ruby version in .ruby-version | |
ARG RUBY_VERSION=3.3.5 | |
FROM docker.io/library/ruby:$RUBY_VERSION-slim AS base | |
# Rails app lives here | |
WORKDIR /rails | |
# Install base packages | |
RUN apt-get update -qq && \ | |
apt-get install --no-install-recommends -y curl libjemalloc2 libvips sqlite3 && \ | |
rm -rf /var/lib/apt/lists /var/cache/apt/archives | |
# Set production environment | |
ENV RAILS_ENV="production" \ | |
BUNDLE_DEPLOYMENT="1" \ | |
BUNDLE_PATH="/usr/local/bundle" \ | |
BUNDLE_WITHOUT="development" | |
# Throw-away build stage to reduce size of final image | |
FROM base AS build | |
# Install packages needed to build gems | |
RUN apt-get update -qq && \ | |
apt-get install --no-install-recommends -y build-essential git pkg-config && \ | |
rm -rf /var/lib/apt/lists /var/cache/apt/archives | |
# Install application gems | |
COPY Gemfile Gemfile.lock ./ | |
RUN bundle install && \ | |
rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \ | |
bundle exec bootsnap precompile --gemfile | |
# Copy application code | |
COPY . . | |
# Precompile bootsnap code for faster boot times | |
RUN bundle exec bootsnap precompile app/ lib/ | |
# Precompiling assets for production without requiring secret RAILS_MASTER_KEY | |
RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile | |
# Final stage for app image | |
FROM base | |
# Copy built artifacts: gems, application | |
COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}" | |
COPY --from=build /rails /rails | |
# Run and own only the runtime files as a non-root user for security | |
RUN groupadd --system --gid 1000 rails && \ | |
useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash && \ | |
chown -R rails:rails db log storage tmp | |
USER 1000:1000 | |
# Entrypoint prepares the database. | |
ENTRYPOINT ["/rails/bin/docker-entrypoint"] | |
# Start server via Thruster by default, this can be overwritten at runtime | |
EXPOSE 80 | |
CMD ["./bin/thrust", "./bin/rails", "server"] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment