nim-censor-bot/Dockerfile
baalajimaestro 1a736e84ce
Use libressl from source instead of openssl
Brings down our binary size by another mb

Signed-off-by: baalajimaestro <me@baalajimaestro.me>
2022-04-25 11:42:08 +05:30

50 lines
1.5 KiB
Docker

FROM nimlang/nim:alpine as builder
RUN apk update && apk add git build-base clang perl autoconf automake libtool llvm llvm-dev lld curl bash openssl sqlite-dev sqlite-static
RUN git clone https://github.com/libressl-portable/portable && \
cd portable && \
./autogen.sh && \
./configure --with-openssldir=/usr/local/libressl --disable-shared &> /dev/null && \
make -j$(nproc) &> /dev/null && \
make install &> /dev/null
COPY . /app
WORKDIR /app
# Build with necessary params to enable statically linking openssl, glibc and sqlite3
RUN nimble build --passL:-L/usr/lib \
--passL:-L/usr/local/lib \
-d:ssl \
--os:any \
-d:posix \
-d:libressl \
-d:useMalloc \
-d:noSignalHandler \
--cc:clang \
-p:. \
--dynlibOverride:ssl \
--dynlibOverride:crypto \
--dynlibOverride:sqlite3 \
--passl:-lssl \
--passl:-lsqlite3 \
--passl:-lcrypto \
--passL:-static \
--passL:"-flto=full" \
--passL:"-fuse-ld=lld" \
--gc:arc \
-d:danger \
--opt:speed \
--accept
# Our binary lives in this image
FROM gcr.io/distroless/base:latest
COPY --from=builder /app/nim_censor_bot /
ENV DB_HOST="/data/censordata.db"
EXPOSE 8080
VOLUME /data
CMD ["./nim_censor_bot"]