11# syntax=docker/dockerfile:1.3-labs
22
3- FROM ghcr.io/acorn-io/images-mirror/tonistiigi/binfmt:qemu-v6.2.0 AS binfmt
4- FROM ghcr.io/acorn-io/images-mirror/moby/buildkit:v0.11.6 AS buildkit
5- FROM ghcr.io/acorn-io/images-mirror/registry:2.8.1 AS registry
6- FROM ghcr.io/acorn-io/images-mirror/rancher/klipper-lb:v0.3.5 AS klipper-lb
3+ FROM ghcr.io/acorn-io/images-mirror/tonistiigi/binfmt:qemu-v8.1.4 AS binfmt
4+ FROM ghcr.io/acorn-io/images-mirror/coredns/coredns:1.10.1 AS coredns
5+ FROM ghcr.io/acorn-io/images-mirror/moby/buildkit:v0.12.4 AS buildkit
6+ FROM ghcr.io/acorn-io/images-mirror/registry:2.8.3 AS registry
7+ FROM ghcr.io/acorn-io/images-mirror/traefik:2.10.7 AS traefik
8+ FROM ghcr.io/acorn-io/images-mirror/rancher/k3s:v1.29.0-k3s1 AS k3s
9+ FROM ghcr.io/acorn-io/images-mirror/rancher/klipper-lb:v0.4.5 AS klipper-lb
710FROM ghcr.io/acorn-io/sleep:latest AS sleep
811
912FROM ghcr.io/acorn-io/images-mirror/golang:1.21-alpine AS helper
@@ -12,6 +15,11 @@ RUN apk -U add curl
1215RUN curl -sfL https://github.com/loft-sh/devspace/archive/refs/tags/v6.3.2.tar.gz | tar xzf - --strip-components=1
1316RUN --mount=type=cache,target=/go/pkg --mount=type=cache,target=/root/.cache/go-build CGO_ENABLED=0 go build -o /usr/local/bin/acorn-helper -ldflags "-s -w" ./helper
1417
18+ FROM cgr.dev/chainguard/wolfi-base AS pause
19+ RUN apk add -U crane
20+ RUN crane pull --platform=linux/amd64 --platform=linux/arm64 --format=oci rancher/mirrored-pause:3.6 /out
21+ RUN tar cvf /pause.tar -C /out .
22+
1523FROM ghcr.io/acorn-io/images-mirror/golang:1.21-alpine AS loglevel
1624WORKDIR /usr/src
1725RUN apk -U add curl && rm -rf /var/cache/apk/*
@@ -28,27 +36,36 @@ FROM ghcr.io/acorn-io/images-mirror/nginx:1.23.2-alpine AS base
2836RUN apk add --no-cache ca-certificates iptables ip6tables fuse3 git openssh pigz xz busybox-static \
2937 && ln -s fusermount3 /usr/bin/fusermount
3038RUN adduser -D acorn
31- RUN mkdir apiserver.local.config && chown acorn apiserver.local.config
39+ RUN mkdir /wd && \
40+ chown acorn /wd && \
41+ mkdir /etc/coredns
3242RUN --mount=from=binfmt,src=/usr/bin,target=/usr/src for i in aarch64 x86_64; do if [ -e /usr/src/qemu-$i ]; then cp /usr/src/qemu-$i /usr/bin; fi; done
3343RUN --mount=from=buildkit,src=/usr/bin,target=/usr/src for i in aarch64 x86_64; do if [ -e /usr/src/buildkit-qemu-$i ]; then cp /usr/src/buildkit-qemu-$i /usr/bin; fi; done
3444COPY --from=binfmt /usr/bin/binfmt /usr/local/bin
3545COPY --from=buildkit /usr/bin/buildkitd /usr/bin/buildctl /usr/bin/buildkit-runc /usr/local/bin/
3646COPY --from=registry /etc/docker/registry/config.yml /etc/docker/registry/config.yml
3747COPY --from=registry /bin/registry /usr/local/bin
3848COPY --from=klipper-lb /usr/bin/entry /usr/local/bin/klipper-lb
49+ COPY --from=coredns /coredns /usr/local/bin/coredns
50+ COPY --from=traefik /usr/local/bin/traefik /usr/local/bin/traefik
51+ COPY --from=pause /pause.tar /var/lib/rancher/k3s/agent/images/
52+ RUN --mount=from=k3s,target=/k3s tar cf - -C /k3s bin | tar xvf -
3953COPY ./scripts/ds-containerd-config-path-entry /usr/local/bin
4054COPY ./scripts/setup-binfmt /usr/local/bin
4155COPY ./scripts/40-copy-resolv-nameserver.sh /docker-entrypoint.d/
4256COPY --from=helper /usr/local/bin/acorn-helper /usr/local/bin/
4357COPY --from=loglevel /usr/local/bin/loglevel /usr/local/bin/
44- VOLUME /var/lib/buildkit
4558
4659COPY /scripts/acorn-helper-init /usr/local/bin
4760COPY /scripts/acorn-busybox-init /usr/local/bin
4861COPY /scripts/acorn-job-helper-init /usr/local/bin
4962COPY /scripts/acorn-job-helper-shutdown /usr/local/bin
5063COPY /scripts/acorn-job-get-output /usr/local/bin
64+ COPY /scripts/k3s-config.yaml /etc/rancher/k3s/config.yaml
5165CMD []
66+ WORKDIR /wd
67+ VOLUME /var/lib/buildkit
68+ VOLUME /var/lib/rancher/k3s
5269STOPSIGNAL SIGTERM
5370ENTRYPOINT ["/usr/local/bin/acorn" ]
5471
0 commit comments