Dockerfile

# Build stage
FROM golang:1.21-alpine AS builder

# Install build dependencies
RUN apk add --no-cache git make ca-certificates

# Set working directory
WORKDIR /build

# Copy go mod files
COPY go.mod go.sum ./

# Download dependencies
RUN go mod download

# Copy source code
COPY . .

# Build the binary
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
    -ldflags="-w -s -X main.version=0.1.0" \
    -o ddc \
    ./cmd/ddc

# Runtime stage
FROM alpine:latest

# Install runtime dependencies
# docker-cli for publish-image action
# openssh-client for deploy-compose action
# ca-certificates for HTTPS
RUN apk add --no-cache \
    docker-cli \
    openssh-client \
    ca-certificates \
    bash \
    curl

# Create non-root user
RUN addgroup -g 1000 ddc && \
    adduser -D -u 1000 -G ddc ddc

# Copy binary from builder
COPY --from=builder /build/ddc /usr/local/bin/ddc

# Make sure binary is executable
RUN chmod +x /usr/local/bin/ddc

# Create directories for SSH keys and results
RUN mkdir -p /home/ddc/.ssh && \
    mkdir -p /home/ddc/workspace && \
    chown -R ddc:ddc /home/ddc

# Switch to non-root user
USER ddc

# Set working directory
WORKDIR /home/ddc/workspace

# Set environment variables
ENV DDC_RESULT_FILE=/home/ddc/workspace/ddc-result.json

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
    CMD ddc version || exit 1

# Default command shows help
ENTRYPOINT ["ddc"]
CMD ["help"]