Follow cameleer3-server CI pattern: docker job uses cameleer-docker-builder:1 (has Docker CLI), Dockerfiles contain multi-stage builds (self-contained, no external toolchain needed). - Dockerfile: restore frontend + maven + runtime stages - ui/sign-in/Dockerfile: add node build stage + Logto base - ci.yml: docker job reverts to cameleer-docker-builder:1, passes REGISTRY_TOKEN as build-arg, adds build cache Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
31 lines
996 B
Docker
31 lines
996 B
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# Frontend: runs natively on build host
|
|
FROM --platform=$BUILDPLATFORM node:22-alpine AS frontend
|
|
ARG REGISTRY_TOKEN
|
|
WORKDIR /ui
|
|
COPY ui/package.json ui/package-lock.json ui/.npmrc ./
|
|
RUN echo "//gitea.siegeln.net/api/packages/cameleer/npm/:_authToken=${REGISTRY_TOKEN}" >> .npmrc && npm ci
|
|
COPY ui/ .
|
|
RUN npm run build
|
|
|
|
# Maven build: runs natively on build host (no QEMU emulation)
|
|
FROM --platform=$BUILDPLATFORM eclipse-temurin:21-jdk-alpine AS build
|
|
WORKDIR /build
|
|
COPY .mvn/ .mvn/
|
|
COPY mvnw pom.xml ./
|
|
# Cache deps — only re-downloaded when POM changes
|
|
RUN ./mvnw dependency:go-offline -B || true
|
|
COPY src/ src/
|
|
COPY --from=frontend /ui/dist/ src/main/resources/static/
|
|
RUN ./mvnw package -DskipTests -B
|
|
|
|
# Runtime: target platform (amd64)
|
|
FROM eclipse-temurin:21-jre-alpine
|
|
WORKDIR /app
|
|
RUN addgroup -S cameleer && adduser -S cameleer -G cameleer
|
|
COPY --from=build /build/target/*.jar app.jar
|
|
USER cameleer
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["java", "-jar", "app.jar"]
|