chore(deploy): switch to patched bookworm slim runtime base

This commit is contained in:
2026-03-06 09:52:04 +00:00
parent 4a60c7ec39
commit cf1cd39c54

View File

@@ -1,28 +1,42 @@
FROM node:20.19.5-alpine3.22 AS deps FROM node:20.19.5-bookworm-slim AS deps
WORKDIR /app WORKDIR /app
RUN apt-get update \
&& apt-get upgrade -y \
&& rm -rf /var/lib/apt/lists/*
COPY package.json package-lock.json ./ COPY package.json package-lock.json ./
RUN npm ci RUN npm ci
FROM node:20.19.5-alpine3.22 AS builder FROM node:20.19.5-bookworm-slim AS builder
WORKDIR /app WORKDIR /app
RUN apt-get update \
&& apt-get upgrade -y \
&& rm -rf /var/lib/apt/lists/*
COPY --from=deps /app/node_modules ./node_modules COPY --from=deps /app/node_modules ./node_modules
COPY . . COPY . .
RUN npm run build RUN npm run build
FROM node:20.19.5-alpine3.22 AS prod-deps FROM node:20.19.5-bookworm-slim AS prod-deps
WORKDIR /app WORKDIR /app
RUN apt-get update \
&& apt-get upgrade -y \
&& rm -rf /var/lib/apt/lists/*
COPY package.json package-lock.json ./ COPY package.json package-lock.json ./
RUN npm ci --omit=dev RUN npm ci --omit=dev
FROM node:20.19.5-alpine3.22 AS runner FROM node:20.19.5-bookworm-slim AS runner
WORKDIR /app WORKDIR /app
ENV NODE_ENV=production ENV NODE_ENV=production
RUN apk upgrade --no-cache RUN apt-get update \
&& apt-get upgrade -y \
&& rm -rf /var/lib/apt/lists/*
COPY --from=prod-deps /app/node_modules ./node_modules COPY --from=prod-deps /app/node_modules ./node_modules
COPY --from=builder /app/package.json ./package.json COPY --from=builder /app/package.json ./package.json