Compare commits

...
2 Commits
Author SHA1 Message Date
Denozordec 116632aa9e docker: оптимизация образа (alpine+nodejs, очистка node_modules)
Docker / build (push) Failing after 16s
Made-with: Cursor
2026-03-21 01:38:01 +07:00
Denozordec 43c1a0dc81 docker: final stage back to node:22-alpine (fewer base layers than distroless)
Made-with: Cursor
2026-03-21 01:31:09 +07:00
+19 -20
View File
@@ -1,36 +1,35 @@
# syntax=docker/dockerfile:1
# Сборка фронта (все devDependencies + UI)
# Stage 1: Сборка фронтенда
FROM node:22-alpine AS build
WORKDIR /app
COPY package.json package-lock.json ./
RUN --mount=type=cache,target=/root/.npm \
npm ci
RUN --mount=type=cache,target=/root/.npm npm ci
COPY index.html vite.config.js ./
COPY public ./public
COPY src ./src
RUN npm run build
# Только runtime-deps: express, cors, sql.js (+ транзитивные)
FROM node:22-alpine AS prod
# Stage 2: Production dependencies + очистка node_modules
FROM node:22-alpine AS deps
WORKDIR /app
COPY package.json package-lock.json ./
RUN --mount=type=cache,target=/root/.npm \
npm ci --omit=dev
COPY server ./server
COPY --from=build /app/dist ./dist
RUN --mount=type=cache,target=/root/.npm npm ci --omit=dev && \
find node_modules -type f \( \
-name '*.md' -o -name '*.ts' -o -name '*.map' -o \
-name 'LICENSE*' -o -name 'CHANGELOG*' -o -name 'README*' -o \
-name '.npmignore' -o -name '.eslintrc*' -o -name '.travis.yml' -o \
-name 'Makefile' -o -name '*.gyp' -o -name '*.gypi' \
\) -delete && \
find node_modules -type d -empty -delete
# Артефакты без package.json / lock — не нужны для node server/index.js
FROM node:22-alpine AS bundle
WORKDIR /out
COPY --from=prod /app/node_modules ./node_modules
COPY --from=prod /app/server ./server
COPY --from=prod /app/dist ./dist
# Минимальный runtime (см. https://github.com/GoogleContainerTools/distroless/blob/main/nodejs/README.md)
FROM gcr.io/distroless/nodejs22-debian13:nonroot
# Stage 3: Минимальный runtime (без npm/yarn/corepack)
FROM alpine:3.21
RUN apk add --no-cache nodejs
WORKDIR /app
ENV NODE_ENV=production
COPY --from=bundle --chown=nonroot:nonroot /out/ .
COPY --from=deps /app/node_modules ./node_modules
COPY --from=build /app/dist ./dist
COPY server ./server
EXPOSE 3001
CMD ["server/index.js"]
CMD ["node", "server/index.js"]