soroush.asadi
ee2a6b9b60
Docker Hub blocks Iran (403) on the BUILD base images too (golang/alpine/busybox/ node) once they fall out of cache. Prefix every Docker Hub FROM/COPY --from with mirror.soroushasadi.com/ (MCR dotnet images are reachable, left as-is). Go builders also set GOPROXY=mirror.kargadan.ir/repository/go-group/ + GOSUMDB=off so any module/ toolchain fetch avoids the geo-blocked proxy.golang.org. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
25 lines
1.1 KiB
Docker
25 lines
1.1 KiB
Docker
FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS base
|
|
WORKDIR /app
|
|
EXPOSE 8080
|
|
# The .NET base image ships neither wget nor curl, which the container healthcheck needs.
|
|
# Copy a single static busybox binary named `wget` (busybox dispatches on argv[0]).
|
|
# This stays fully offline — no apt/network — matching the vendored Go builds.
|
|
COPY --from=mirror.soroushasadi.com/busybox:1.36 /bin/busybox /usr/bin/wget
|
|
|
|
FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
|
|
WORKDIR /src
|
|
# Restore is its own cached layer: it only re-runs when the .csproj (deps) changes,
|
|
# not on every source edit. Critical here — NuGet restore is the slow step.
|
|
COPY NuGet.Config .
|
|
COPY ["FlatRender.IdentitySvc/FlatRender.IdentitySvc.csproj", "FlatRender.IdentitySvc/"]
|
|
RUN dotnet restore "FlatRender.IdentitySvc/FlatRender.IdentitySvc.csproj"
|
|
COPY . .
|
|
# Single publish compiles + packages; --no-restore reuses the cached restore above.
|
|
RUN dotnet publish "FlatRender.IdentitySvc/FlatRender.IdentitySvc.csproj" \
|
|
-c Release -o /app/publish --no-restore /p:UseAppHost=false
|
|
|
|
FROM base AS final
|
|
WORKDIR /app
|
|
COPY --from=build /app/publish .
|
|
ENTRYPOINT ["dotnet", "FlatRender.IdentitySvc.dll"]
|