woj-server/Runner.Dockerfile

ARG IMAGE_PREFIX=git.0x7f.app/woj
ARG VERSION=latest

# Base image
FROM ${IMAGE_PREFIX}/woj-server-base:${VERSION} AS base

# Rootfs: debian-full
FROM ${IMAGE_PREFIX}/debian-full:${VERSION} AS rootfs-full

# Rootfs: debian-full
FROM ${IMAGE_PREFIX}/debian-run:${VERSION} AS rootfs-run

# Main image
FROM docker.io/library/alpine

WORKDIR /app
RUN apk --no-cache add tzdata ca-certificates bash tini

# sources
COPY --from=base /builder/resource/runner /app/resource/runner
COPY --from=base /builder/config.docker.yaml /app
COPY --from=base /builder/docker-entrypoint.sh /app
COPY --from=base /builder/woj /app

# rootfs
COPY --from=rootfs-full / /app/resource/runner/framework/rootfs/full
COPY --from=rootfs-run  / /app/resource/runner/framework/rootfs/run

# nsjail
COPY --from=rootfs-full /woj/framework/scripts/nsjail /app/resource/runner/framework/scripts/nsjail

# reap zombies from containerd-shim
ENTRYPOINT ["/sbin/tini", "/app/docker-entrypoint.sh"]