ixo-oracle-dev/Dockerfile.app at main · Michael-Ixo/ixo-oracle-dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
ARG NODE_VERSION=22.13.0

########################################
# 1) Base: Node + pnpm + turbo on Alpine
########################################
FROM --platform=linux/amd64 node:${NODE_VERSION}-alpine AS base

# Install build tools & git
RUN apk add --no-cache libc6-compat python3 make g++ gcc git

# Install pnpm, turbo, rimraf
RUN npm install -g pnpm@9.2.0 turbo rimraf \
 && pnpm config set store-dir ~/.pnpm-store

# Ensure Node picks up ESM-interop flag
ENV NODE_OPTIONS="--experimental-require-module"

WORKDIR /app

########################################
# 2) Prune: isolate only the "app" package
########################################
FROM base AS pruner
ARG PROJECT=app

COPY . .
RUN turbo prune --scope=${PROJECT} --docker

########################################
# 3) Builder: install prod deps + build
########################################
FROM base AS builder
ARG PROJECT=app

# Copy only lockfiles & workspace layout
COPY --from=pruner /app/out/pnpm-lock.yaml    ./pnpm-lock.yaml
COPY --from=pruner /app/out/pnpm-workspace.yaml ./pnpm-workspace.yaml
COPY --from=pruner /app/out/json              ./

# Install (cached) & prune to prod only
RUN --mount=type=cache,target=/root/.pnpm-store pnpm install --frozen-lockfile

# Copy in your isolated workspace
COPY --from=pruner /app/out/full .

# Build & strip dev files
RUN turbo run build --filter=${PROJECT} \
 && pnpm prune --prod --no-optional \
 && rm -rf **/*.ts **/*.map

########################################
# 4) Runner: minimal prod image
########################################
FROM --platform=linux/amd64 node:${NODE_VERSION}-alpine AS runner

# Drop privileges
RUN addgroup --system --gid 1001 nodejs \
 && adduser  --system --uid 1001 nodejs -G nodejs
USER nodejs

WORKDIR /app

# Copy only what's needed at runtime
COPY --from=builder --chown=nodejs:nodejs /app/node_modules          ./node_modules
COPY --from=builder --chown=nodejs:nodejs /app/packages              ./packages
COPY --from=builder --chown=nodejs:nodejs /app/apps/app/dist        ./apps/app/dist
COPY --from=builder --chown=nodejs:nodejs /app/apps/app/package.json ./apps/app/package.json

WORKDIR /app/apps/app
ENV NODE_ENV=production

EXPOSE 3000

# Exec form so flags aren't mangled
CMD ["node", "dist/main.js"]