From 385eb52b6411c5a2c033e510c784e2a2f01616d4 Mon Sep 17 00:00:00 2001
From: onepabz <pablo@tty0.es>
Date: Tue, 23 Apr 2024 13:04:56 +0200
Subject: [PATCH] Add Dockerfile

---
 Dockerfile | 55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 Dockerfile

diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..b627e2f
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,55 @@
+# Use a specific version of the Golang image for the build stage
+FROM golang:1.22.2-alpine AS builder
+
+# Install git, necessary for fetching the Go modules and source code
+RUN apk --no-cache add git
+
+# Set the working directory inside the container
+WORKDIR /app
+
+# Copy your local source code into the image
+COPY . .
+
+# Adjust permissions to ensure all files in /app are accessible by 'nobody'
+# Set ownership of all files in the /app directory to 'nobody'
+RUN chown -R nobody:nobody /app
+
+# Create a directory for the build cache that the 'nobody' user can access
+RUN mkdir /.cache && chown nobody:nobody /.cache
+
+# Add a non-root user and switch to it
+USER nobody
+
+# Set environment variable for Go cache directory
+ENV GOCACHE=/.cache/go-build
+
+# Run go mod tidy to ensure all dependencies are correct and go.sum is updated based on your go.mod
+RUN go mod tidy
+
+# Download all dependencies. Dependencies will be cached if the go.mod and go.sum files are not changed
+RUN go mod download
+
+# Build the application. Consider simplifying build flags if debug information is not an issue or necessary for troubleshooting
+RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o electronwall .
+
+# Switch to a new stage using Alpine to keep the final image small
+FROM alpine:latest
+
+# Install Bash in the final image
+RUN apk add --no-cache bash
+
+# Create a user 'appuser' and switch to it
+RUN adduser -D appuser
+USER appuser
+
+# Set work directory to /app
+WORKDIR /app
+
+# Copy the binary from the builder stage
+COPY --from=builder /app/electronwall .
+
+# Copy the rules directory from the builder stage
+COPY --from=builder /app/rules /app/rules
+
+# Specify the container's executable
+CMD ["./electronwall"]