Dockerfile

# this is a multi-stage build
# the 1st FROM builds the application
FROM golang:1.20.2-alpine AS baseGo
LABEL stage=build

ENV CGO_ENABLED 0
RUN apk add --no-cache git bash openssh

RUN git config --global url."git@github.com:".insteadOf "https://github.com/"
RUN mkdir /root/gocode
COPY . /root/gocode
WORKDIR /root/gocode

ENV CGO_ENABLED 0
RUN apk --no-cache add git make
ENV GO111MODULE on
RUN go version
RUN make build
RUN make test
#
# this is a dependancy for our container to have CA certs to talk to vault
#
FROM alpine:latest as alpineCerts
LABEL stage=alpineCerts
RUN apk add -U --no-cache ca-certificates

#
# the 2nd FROM says copy the binary from baseGo and put it here using scratch as its base
# - note using alpine because need to run a shell command wrapper
#FROM scratch AS release
FROM alpine:3.11.3 AS release
LABEL stage=release

# Pull CA Certificates to allow for TLS validation a CA
COPY --from=alpineCerts /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=baseGo /root/gocode/bin /app
COPY --from=baseGo /root/gocode/scripts /app
ENTRYPOINT ["/app/entrypoint.sh"]


#
# add another base image from scratch and add meta data called stage=mock
#
FROM scratch AS mock
LABEL stage=mock

#
# Only ship the release layer
FROM release