Files

119 lines
4.3 KiB
Docker

# syntax=docker/dockerfile:1.7
ARG DEBIAN_BASE=debian:trixie-slim
ARG RUST_IMAGE=rust:1-trixie
FROM ${DEBIAN_BASE} AS native
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
--mount=type=cache,target=/var/lib/apt,sharing=locked \
apt-get update \
&& apt-get install -y --no-install-recommends \
ca-certificates curl xz-utils build-essential pkg-config cmake nasm yasm git \
zlib1g-dev libde265-dev libdav1d-dev libaom-dev \
libvips-dev libwebp-dev liblcms2-dev libyuv-dev \
&& rm -rf /var/lib/apt/lists/*
COPY fluxer_media_proxy/tools/install-native-deps.sh /tmp/install-native-deps.sh
RUN /tmp/install-native-deps.sh /usr/local
RUN mkdir -p /native/lib \
&& cp -a /usr/local/lib/*.so.* /native/lib/
FROM ${RUST_IMAGE} AS builder
WORKDIR /build
COPY --from=native /usr/local /usr/local
RUN ldconfig
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
--mount=type=cache,target=/var/lib/apt,sharing=locked \
apt-get update \
&& apt-get install -y --no-install-recommends \
ca-certificates pkg-config build-essential \
libcurl4-openssl-dev libvips-dev libwebp-dev \
liblcms2-dev libyuv-dev libde265-dev libdav1d-dev libaom-dev \
&& rm -rf /var/lib/apt/lists/* \
&& rm -f /usr/lib/*/libheif.so.1* \
&& ldconfig \
&& [ "$(ldconfig -p | grep -c 'libheif\.so\.1 ')" -eq 1 ] \
&& ldconfig -p | grep -q 'libheif\.so\.1 .* => /usr/local/lib/libheif\.so\.1$'
COPY . .
RUN --mount=type=cache,target=/usr/local/cargo/registry \
--mount=type=cache,target=/usr/local/cargo/git \
--mount=type=cache,target=/build/target \
cargo test -p fluxer-media-proxy \
&& cargo build --release -p fluxer-media-proxy \
&& cp target/release/fluxer-media-proxy /usr/local/bin/fluxer-media-proxy
FROM ${DEBIAN_BASE} AS runtime
ARG BUILD_VERSION=""
ARG SOURCE_SHA=""
ARG SOURCE_DATE=""
LABEL org.opencontainers.image.title="fluxer-media-proxy"
LABEL org.opencontainers.image.description="High-throughput media transcoding proxy: libvips + libavformat + libcurl"
LABEL org.opencontainers.image.licenses="AGPL-3.0-or-later"
LABEL org.opencontainers.image.vendor="Fluxer"
LABEL org.opencontainers.image.url="https://fluxer.app"
LABEL org.opencontainers.image.documentation="https://docs.fluxer.app"
LABEL org.opencontainers.image.source="https://github.com/fluxerapp/fluxer"
LABEL org.opencontainers.image.version="${BUILD_VERSION}"
LABEL org.opencontainers.image.revision="${SOURCE_SHA}"
LABEL org.opencontainers.image.created="${SOURCE_DATE}"
LABEL app.fluxer.build-version="${BUILD_VERSION}"
COPY --from=native /native/lib /usr/local/lib
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
--mount=type=cache,target=/var/lib/apt,sharing=locked \
apt-get update \
&& apt-get install -y --no-install-recommends \
ca-certificates tini \
libcurl4t64 libvips42t64 \
libwebp7 libwebpmux3 libwebpdemux2 \
liblcms2-2 libyuv0 libde265-0 libdav1d7 libaom3 \
libjemalloc2 \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/* \
&& rm -f /usr/lib/*/libheif.so.1* \
&& ldconfig
RUN groupadd --system --gid 10001 fluxer \
&& useradd --system --uid 10001 --gid 10001 --home /var/lib/fluxer --create-home fluxer
COPY --from=builder /usr/local/bin/fluxer-media-proxy /usr/local/bin/fluxer-media-proxy
RUN install -d -o fluxer -g fluxer /var/lib/fluxer/media_proxy_storage
RUN ldd /usr/local/bin/fluxer-media-proxy \
&& ! ldd /usr/local/bin/fluxer-media-proxy | grep -q 'not found' \
&& [ "$(ldconfig -p | grep -c 'libheif\.so\.1 ')" -eq 1 ] \
&& ldconfig -p | grep -q 'libheif\.so\.1 .* => /usr/local/lib/libheif\.so\.1$' \
&& ldd /usr/local/bin/fluxer-media-proxy | grep -q 'libheif\.so\.1 => /usr/local/lib/libheif\.so\.1'
ENV LD_PRELOAD=libjemalloc.so.2
ENV MALLOC_CONF="background_thread:true,metadata_thp:auto,dirty_decay_ms:5000,muzzy_decay_ms:5000"
ENV VIPS_CONCURRENCY=1
ENV VIPS_DISC_THRESHOLD=1g
ENV G_MESSAGES_DEBUG=
ENV FLUXER_MEDIA_PROXY_HOST=0.0.0.0
ENV FLUXER_MEDIA_PROXY_PORT=8080
ENV BUILD_VERSION="${BUILD_VERSION}"
USER 10001:10001
WORKDIR /var/lib/fluxer
EXPOSE 8080
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
CMD ["/usr/local/bin/fluxer-media-proxy", "healthcheck"]
ENTRYPOINT ["/usr/bin/tini", "--"]
CMD ["/usr/local/bin/fluxer-media-proxy"]