30810eecd7
Some checks failed
Create issues from TODOs / todos (push) Failing after 3s
Close inactive issues / close-issues (push) Has been cancelled
Deploy GitHub Pages / deploy-preview (push) Has been cancelled
CI / ⚙️ Variables Setup (push) Has been cancelled
CI / ⚙️ Test Guard (push) Has been cancelled
CI / 🚀 Notify external services - draft (push) Has been cancelled
CI / 📦 Build Packages (push) Has been cancelled
CI / 📦 Meteor Build (coverage) (push) Has been cancelled
CI / 📦 Meteor Build (production) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [account-service presence-service omnichannel-transcript-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [account-service presence-service omnichannel-transcript-service], fips) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [authorization-service queue-worker-service ddp-streamer-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [authorization-service queue-worker-service ddp-streamer-service], fips) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [rocketchat], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [rocketchat], coverage) (push) Has been cancelled
CI / 🚢 Build Docker (amd64, [rocketchat], fips) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [account-service presence-service omnichannel-transcript-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [authorization-service queue-worker-service ddp-streamer-service], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [rocketchat], ${{ (github.event_name != 'release' && github.ref != 'refs/heads/develop') && 'coverage' || 'production' }}) (push) Has been cancelled
CI / 🚢 Build Docker (arm64, [rocketchat], coverage) (push) Has been cancelled
CI / 🚢 Publish Docker Images (ghcr.io) (push) Has been cancelled
CI / 📦 Track Image Sizes (push) Has been cancelled
CI / 🔎 Code Check - Action Lint (push) Has been cancelled
CI / 🔎 Code Check (push) Has been cancelled
CI / 🔨 Test Storybook (push) Has been cancelled
CI / 🔨 Test Unit (push) Has been cancelled
CI / 🔨 Test API (CE) (push) Has been cancelled
CI / 🔨 Test API Livechat (CE) (push) Has been cancelled
CI / 🔨 Test UI (CE) (push) Has been cancelled
CI / 🔨 Test API (EE) (push) Has been cancelled
CI / 🔨 Test API Livechat (EE) (push) Has been cancelled
CI / 🔨 Test API Apps (deno-runtime - EE) (push) Has been cancelled
CI / 🔨 Test UI (EE) (push) Has been cancelled
CI / 🔨 Test API (FIPS) (push) Has been cancelled
CI / 🔨 Test API Livechat (FIPS) (push) Has been cancelled
CI / 🔨 Test UI (FIPS) (push) Has been cancelled
CI / 🔨 Test Federation Matrix (push) Has been cancelled
CI / 📊 Report Coverage (push) Has been cancelled
CI / ✅ Tests Done (push) Has been cancelled
CI / 🚀 Publish build assets (push) Has been cancelled
CI / 🚀 Publish Docker Images (DockerHub) (push) Has been cancelled
CI / 🚀 Notify external services (push) Has been cancelled
CI / Update Version Durability (push) Has been cancelled
Release / Release (push) Has been cancelled
Code scanning - action / CodeQL-Build (push) Failing after 2s
Auto-close duplicate issues / auto-close-duplicates (push) Failing after 1s
72 lines
2.2 KiB
Docker
72 lines
2.2 KiB
Docker
ARG DENO_VERSION="1.37.1"
|
|
|
|
FROM denoland/deno:bin-${DENO_VERSION} as deno
|
|
|
|
FROM node:24.15.0-bullseye-slim
|
|
|
|
LABEL maintainer="buildmaster@rocket.chat"
|
|
|
|
# dependencies
|
|
RUN groupadd -g 65533 -r rocketchat \
|
|
&& useradd -u 65533 -r -g rocketchat rocketchat \
|
|
&& mkdir -p /app/uploads \
|
|
&& chown rocketchat:rocketchat /app/uploads \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends fontconfig
|
|
|
|
COPY --from=deno /deno /bin/deno
|
|
|
|
# --chown requires Docker 17.12 and works only on Linux
|
|
ADD --chown=rocketchat:rocketchat . /app
|
|
|
|
# needs a mongoinstance - defaults to container linking with alias 'mongo'
|
|
ENV DEPLOY_METHOD=docker \
|
|
NODE_ENV=production \
|
|
MONGO_URL=mongodb://mongo:27017/rocketchat \
|
|
HOME=/tmp \
|
|
PORT=3000 \
|
|
ROOT_URL=http://localhost:3000 \
|
|
Accounts_AvatarStorePath=/app/uploads
|
|
|
|
RUN aptMark="$(apt-mark showmanual)" \
|
|
&& apt-get install -y --no-install-recommends g++ make python3 ca-certificates \
|
|
&& apt-mark auto '.*' > /dev/null \
|
|
&& apt-mark manual $aptMark > /dev/null
|
|
|
|
USER rocketchat
|
|
|
|
RUN cd /app/bundle/programs/server \
|
|
&& npm install --omit=dev \
|
|
&& cd npm/node_modules/isolated-vm \
|
|
&& npm install --omit=dev \
|
|
&& npm cache clear --force \
|
|
# Drop sourcemaps from third-party prod deps and the client bundle:
|
|
# - server/npm/node_modules: .map files shipped inside packages
|
|
# (openpgp, date-fns, etc.). Node does not read them at runtime.
|
|
# - web.browser: client-side bundle, maps have no runtime value in the image.
|
|
# Maps under /app/bundle/programs/server/{app,packages,node_modules/meteor}
|
|
# are loaded by Meteor's source-map-support at boot, so they are kept.
|
|
&& find /app/bundle/programs/server/npm/node_modules -type f -name '*.map' -delete \
|
|
&& find /app/bundle/programs/web.browser -type f -name '*.map' -delete
|
|
|
|
USER root
|
|
|
|
RUN find /usr/local -type f -executable -exec ldd '{}' ';' \
|
|
| awk '/=>/ { print $(NF-1) }' \
|
|
| sort -u \
|
|
| xargs -r dpkg-query --search \
|
|
| cut -d: -f1 \
|
|
| sort -u \
|
|
| xargs -r apt-mark manual \
|
|
&& apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false
|
|
|
|
USER rocketchat
|
|
|
|
VOLUME /app/uploads
|
|
|
|
WORKDIR /app/bundle
|
|
|
|
EXPOSE 3000
|
|
|
|
CMD ["node", "main.js"]
|