tlstools/Dockerfile at master · jsandas/tlstools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
## build go binary
FROM golang:1.26 AS build

COPY . /go/src/tlstools

WORKDIR /go/src/tlstools

RUN go mod download

RUN CGO_ENABLED=0 go build ./cmd/tlstools

RUN CGO_ENABLED=0 go build ./cmd/tlstools-cli

## build base image
FROM debian:bookworm AS base

RUN apt-get update && apt upgrade -y \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

RUN useradd -r appuser

COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY --from=ghcr.io/jsandas/debian-weakkeys /usr/share/openssl-blacklist/* /opt/tlstools/resources/weakkeys/

USER appuser

WORKDIR /opt/tlstools/bin

## build server image
FROM base AS server

COPY --from=build /go/src/tlstools/tlstools /opt/tlstools/bin

ENTRYPOINT ["/opt/tlstools/bin/tlstools"]

# build cli image
FROM base AS cli

COPY --from=build /go/src/tlstools/tlstools-cli /opt/tlstools/bin

ENTRYPOINT ["/opt/tlstools/bin/tlstools-cli"]