Merge pull request #21 from uc-cdis/chore/nobody

Base Image Migration to Amazon Linux

Author: piotrsenkow

.github/workflows/image_build_push.yaml

@@ -0,0 +1,13 @@
+name: Build Image and Push to Quay
+
+on: push
+
+jobs:
+  ci:
+    name: Build Image and Push to Quay
+    uses: uc-cdis/.github/.github/workflows/image_build_push.yaml@master
+    secrets:
+      ECR_AWS_ACCESS_KEY_ID: ${{ secrets.ECR_AWS_ACCESS_KEY_ID }}
+      ECR_AWS_SECRET_ACCESS_KEY: ${{ secrets.ECR_AWS_SECRET_ACCESS_KEY }}
+      QUAY_USERNAME: ${{ secrets.QUAY_USERNAME }}
+      QUAY_ROBOT_TOKEN: ${{ secrets.QUAY_ROBOT_TOKEN }}

Dockerfile

@@ -1,20 +1,29 @@
-FROM golang:1.20-alpine
+FROM golang:1.20-alpine AS builder
 
 WORKDIR /go/src/github.com/abutaha/aws-es-proxy
 COPY . .
 
 RUN CGO_ENABLED=0 GOOS=linux go build -o aws-es-proxy
+RUN echo "nobody:x:65534:65534:Nobody:/:" > /etc_passwd
 
 FROM alpine:3.17
 LABEL name="aws-es-proxy" \
       version="latest"
 
 RUN apk --no-cache add ca-certificates
 WORKDIR /home/
-COPY --from=0 /go/src/github.com/abutaha/aws-es-proxy/aws-es-proxy /usr/local/bin/
 
-ENV PORT_NUM 9200
+
+FROM scratch
+
+COPY --from=busybox:1.35.0-uclibc /bin/sh /bin/sh
+COPY --from=builder /etc_passwd /etc/passwd
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=builder /go/src/github.com/abutaha/aws-es-proxy/aws-es-proxy /aws-es-proxy
+
+ENV PORT_NUM=9200
 EXPOSE ${PORT_NUM}
 
-ENTRYPOINT ["aws-es-proxy"] 
-CMD ["-h"]
+USER nobody
+ENTRYPOINT ["/aws-es-proxy"] 
+CMD ["-timeout", "180", "-verbose", "-listen", ":9200"]