# syntax=docker/dockerfile:1
# --- stage 1: dependency recipe ---
FROM rust:slim-bookworm AS chef
RUN cargo install cargo-chef --locked
WORKDIR /build
# --- stage 2: compute recipe ---
FROM chef AS planner
COPY . .
RUN cargo chef prepare --recipe-path recipe.json
# --- stage 3: build ---
FROM chef AS builder
RUN apt-get update && apt-get install -y --no-install-recommends \
cmake \
make \
pkg-config \
&& rm -rf /var/lib/apt/lists/*
# build dependencies first (cached layer)
COPY --from=planner /build/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json
# build the project
COPY . .
RUN cargo build --release
# --- stage 4: runtime ---
FROM debian:bookworm-slim
RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates \
&& rm -rf /var/lib/apt/lists/*
RUN useradd --system --no-create-home --shell /usr/sbin/nologin hydrant
COPY --from=builder /build/target/release/hydrant /usr/local/bin/hydrant
# data volume for the fjall database
RUN mkdir -p /data && chown -R hydrant:hydrant /data
VOLUME ["/data"]
WORKDIR /data
ENV HYDRANT_DATABASE_PATH=/data/hydrant.db
EXPOSE 3000
USER hydrant
ENTRYPOINT ["/usr/local/bin/hydrant"]