Reduce image size by removing unnecessary packages and limiting CNI plugins

Author: dash14

compose.yml

@@ -15,7 +15,7 @@ services:
       - EXTERNAL_RESOLVER=${EXTERNAL_RESOLVER:-8.8.8.8 8.8.4.4 valid=300s}
     restart: unless-stopped
     healthcheck:
-      test: ["CMD", "sh", "-c", "curl -sf http://localhost/health && nc -z localhost 1234"]
+      test: ["CMD", "sh", "-c", "wget -qO /dev/null http://127.0.0.1/health && nc -z 127.0.0.1 1234"]
       interval: 30s
       timeout: 5s
       retries: 10

docker/Dockerfile

@@ -2,30 +2,29 @@ ARG BUILDKIT_VERSION=v0.27.1
 ARG CNI_VERSION=v1.9.0
 ARG ALPINE_RELEASE=3.23
 
-# Fetch CNI plugins
-FROM alpine:$ALPINE_RELEASE AS cni-plugins
+# Prepare dependencies
+FROM alpine:$ALPINE_RELEASE AS deps
 ARG CNI_VERSION
-RUN apk add --no-cache curl && \
+RUN apk add --no-cache curl gettext && \
     mkdir -p /opt/cni/bin && \
     ARCH=$(uname -m | sed 's/x86_64/amd64/' | sed 's/aarch64/arm64/') && \
     curl -fsSL "https://github.com/containernetworking/plugins/releases/download/${CNI_VERSION}/cni-plugins-linux-${ARCH}-${CNI_VERSION}.tgz" \
-      | tar -C /opt/cni/bin -xz
+      | tar -C /opt/cni/bin -xz ./bridge ./host-local ./loopback
 
 # Final image
 FROM moby/buildkit:${BUILDKIT_VERSION}
 
 RUN apk add --no-cache \
       nginx nginx-mod-stream \
       dnsmasq \
-      iptables \
-      curl \
-      gettext \
-      tzdata && \
-    ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && \
-    echo $TZ > /etc/timezone
+      iptables
+
+# envsubst
+COPY --from=deps /usr/bin/envsubst /usr/bin/envsubst
+COPY --from=deps /usr/lib/libintl.so* /usr/lib/
 
 # CNI
-COPY --from=cni-plugins /opt/cni/bin /opt/cni/bin
+COPY --from=deps /opt/cni/bin /opt/cni/bin
 
 # BuildKit
 RUN mkdir -p /etc/buildkit

setup/compose.yml

@@ -13,7 +13,7 @@ services:
       - EXTERNAL_RESOLVER=${EXTERNAL_RESOLVER:-1.1.1.1 8.8.8.8 valid=300s}
     restart: unless-stopped
     healthcheck:
-      test: ["CMD", "sh", "-c", "curl -sf http://localhost/health && nc -z localhost 1234"]
+      test: ["CMD", "sh", "-c", "wget -qO /dev/null http://127.0.0.1/health && nc -z 127.0.0.1 1234"]
       interval: 30s
       timeout: 5s
       retries: 10