transferia/Dockerfile at altinity · Altinity/transferia · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
FROM golang:1.24.6-alpine3.22 AS builder

WORKDIR /src

ARG TARGETOS
ARG TARGETARCH

RUN apk add --no-cache git ca-certificates

COPY . .

RUN go mod download

RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -o /out/trcli ./cmd/trcli

FROM alpine:3.22

# Environment variables
ENV TZ=Etc/UTC
ENV ROTATION_TZ=Etc/UTC

# Install essential packages, common utilities, and set up timezone
RUN apk add --no-cache \
  tzdata \
  gnupg \
  wget \
  curl \
  ca-certificates \
  openssh-client \
  iptables \
  supervisor \
  dirmngr \
  nano \
  vim \
  busybox-extras \
  less \
  tcpdump \
  net-tools \
  lsof \
  libaio \
  unzip \
  git && \
  ln -sf /usr/share/zoneinfo/${TZ} /etc/localtime && \
  echo "${TZ}" > /etc/timezone

# Install PostgreSQL client
RUN apk add --no-cache \
  postgresql16-client

# Install ClickHouse
RUN cat <<EOF > /usr/local/bin/install-clickhouse.sh
#!/bin/sh
set -eo pipefail

export TAG="v25.8.11.66-lts"
export VERSION="25.8.11.66"

case $(uname -m) in
  x86_64) export ARCH=amd64 ;;
  aarch64) export ARCH=arm64 ;;
  *) echo "Unknown architecture $(uname -m)"; exit 1
esac

for PKG in clickhouse-common-static clickhouse-client; do
  curl -L -o \${PKG}.tgz "https://github.com/ClickHouse/ClickHouse/releases/download/\${TAG}/\${PKG}-\${VERSION}-\${ARCH}.tgz"
done

tar -xzvf "clickhouse-common-static.tgz"
clickhouse-common-static-\${VERSION}/install/doinst.sh

tar -xzvf "clickhouse-client.tgz"
clickhouse-client-\${VERSION}/install/doinst.sh
EOF

RUN chmod +x /usr/local/bin/install-clickhouse.sh && /usr/local/bin/install-clickhouse.sh && rm -f /usr/local/bin/install-clickhouse.sh

# Create a non-root user and group
# Alpine uses -S for system users/groups.
RUN addgroup -S trcligroup && \
  adduser -S -G trcligroup trcliuser

# Copy the Go binary built for the target platform
COPY --from=builder /out/trcli /usr/local/bin/trcli

# Set executable permission
RUN chmod +x /usr/local/bin/trcli

# Switch to the non-root user
USER trcliuser

# Switch back to root before ENTRYPOINT
USER root

# Entrypoint
ENTRYPOINT ["/usr/local/bin/trcli"]