Compare commits

...
2 Commits
Author SHA1 Message Date
Denozordec 116632aa9e docker: оптимизация образа (alpine+nodejs, очистка node_modules)
Docker / build (push) Failing after 16s
Made-with: Cursor
2026-03-21 01:38:01 +07:00
Denozordec 43c1a0dc81 docker: final stage back to node:22-alpine (fewer base layers than distroless)
Made-with: Cursor
2026-03-21 01:31:09 +07:00
+19 -20
View File
@@ -1,36 +1,35 @@
# syntax=docker/dockerfile:1 # syntax=docker/dockerfile:1
# Сборка фронта (все devDependencies + UI) # Stage 1: Сборка фронтенда
FROM node:22-alpine AS build FROM node:22-alpine AS build
WORKDIR /app WORKDIR /app
COPY package.json package-lock.json ./ COPY package.json package-lock.json ./
RUN --mount=type=cache,target=/root/.npm \ RUN --mount=type=cache,target=/root/.npm npm ci
npm ci
COPY index.html vite.config.js ./ COPY index.html vite.config.js ./
COPY public ./public COPY public ./public
COPY src ./src COPY src ./src
RUN npm run build RUN npm run build
# Только runtime-deps: express, cors, sql.js (+ транзитивные) # Stage 2: Production dependencies + очистка node_modules
FROM node:22-alpine AS prod FROM node:22-alpine AS deps
WORKDIR /app WORKDIR /app
COPY package.json package-lock.json ./ COPY package.json package-lock.json ./
RUN --mount=type=cache,target=/root/.npm \ RUN --mount=type=cache,target=/root/.npm npm ci --omit=dev && \
npm ci --omit=dev find node_modules -type f \( \
COPY server ./server -name '*.md' -o -name '*.ts' -o -name '*.map' -o \
COPY --from=build /app/dist ./dist -name 'LICENSE*' -o -name 'CHANGELOG*' -o -name 'README*' -o \
-name '.npmignore' -o -name '.eslintrc*' -o -name '.travis.yml' -o \
-name 'Makefile' -o -name '*.gyp' -o -name '*.gypi' \
\) -delete && \
find node_modules -type d -empty -delete
# Артефакты без package.json / lock — не нужны для node server/index.js # Stage 3: Минимальный runtime (без npm/yarn/corepack)
FROM node:22-alpine AS bundle FROM alpine:3.21
WORKDIR /out RUN apk add --no-cache nodejs
COPY --from=prod /app/node_modules ./node_modules
COPY --from=prod /app/server ./server
COPY --from=prod /app/dist ./dist
# Минимальный runtime (см. https://github.com/GoogleContainerTools/distroless/blob/main/nodejs/README.md)
FROM gcr.io/distroless/nodejs22-debian13:nonroot
WORKDIR /app WORKDIR /app
ENV NODE_ENV=production ENV NODE_ENV=production
COPY --from=bundle --chown=nonroot:nonroot /out/ . COPY --from=deps /app/node_modules ./node_modules
COPY --from=build /app/dist ./dist
COPY server ./server
EXPOSE 3001 EXPOSE 3001
CMD ["server/index.js"] CMD ["node", "server/index.js"]