mirror of
https://github.com/andreicscs/HoneyWire
synced 2026-06-26 12:39:53 +00:00
andreicscs
28 lines
816 B
Docker
28 lines
816 B
Docker
# STAGE 1: Build
|
|
FROM golang:1.25 AS builder
|
|
|
|
WORKDIR /src
|
|
|
|
# 1. Copy the shared SDK into the builder
|
|
COPY SDKs/go-honeywire ./SDKs/go-honeywire
|
|
|
|
# 2. Copy the specific sensor code
|
|
COPY Sensors/official/FileCanary ./Sensors/official/FileCanary
|
|
|
|
# 3. Move into the sensor folder to build
|
|
WORKDIR /src/Sensors/official/FileCanary
|
|
|
|
# Download dependencies (this will now successfully find the local SDK)
|
|
RUN go mod download
|
|
|
|
# Compile the pure Go, fully static binary
|
|
RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o file-canary ./main.go
|
|
|
|
# STAGE 2: Distroless
|
|
FROM gcr.io/distroless/static-debian12:nonroot
|
|
|
|
# Create a default mount point with correct nonroot ownership
|
|
COPY --chown=65532:65532 --from=builder /src/Sensors/official/FileCanary/file-canary /app/file-canary
|
|
|
|
USER 65532
|
|
CMD ["/app/file-canary"] |