Browse Source
fix: update Dockerfile.dev - pin corepack, add nftables, remove DEBUG env
Updated Node.js base image and pinned corepack version for reproducibility. Removed redundant iptables legacy setup commands.
pull/2552/head
Platon47
4 months ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
12 additions and
9 deletions
-
Dockerfile.dev
|
|
|
@ -1,8 +1,8 @@ |
|
|
|
FROM docker.io/library/node:krypton-alpine |
|
|
|
FROM docker.io/library/node:jod-alpine |
|
|
|
WORKDIR /app |
|
|
|
|
|
|
|
# update corepack |
|
|
|
RUN npm install --global corepack@latest |
|
|
|
# update corepack (pinned version for reproducible builds) |
|
|
|
RUN npm install --global corepack@0.34.4 |
|
|
|
# Install pnpm |
|
|
|
RUN corepack enable pnpm |
|
|
|
|
|
|
|
@ -14,17 +14,20 @@ RUN apk add --no-cache \ |
|
|
|
dumb-init \ |
|
|
|
iptables \ |
|
|
|
ip6tables \ |
|
|
|
nftables \ |
|
|
|
kmod \ |
|
|
|
iptables-legacy \ |
|
|
|
wireguard-go \ |
|
|
|
wireguard-tools |
|
|
|
|
|
|
|
# Use iptables-legacy |
|
|
|
RUN update-alternatives --install /usr/sbin/iptables iptables /usr/sbin/iptables-legacy 10 --slave /usr/sbin/iptables-restore iptables-restore /usr/sbin/iptables-legacy-restore --slave /usr/sbin/iptables-save iptables-save /usr/sbin/iptables-legacy-save |
|
|
|
RUN update-alternatives --install /usr/sbin/ip6tables ip6tables /usr/sbin/ip6tables-legacy 10 --slave /usr/sbin/ip6tables-restore ip6tables-restore /usr/sbin/ip6tables-legacy-restore --slave /usr/sbin/ip6tables-save ip6tables-save /usr/sbin/ip6tables-legacy-save |
|
|
|
wireguard-tools && \ |
|
|
|
update-alternatives --install /usr/sbin/iptables iptables /usr/sbin/iptables-legacy 10 \ |
|
|
|
--slave /usr/sbin/iptables-restore iptables-restore /usr/sbin/iptables-legacy-restore \ |
|
|
|
--slave /usr/sbin/iptables-save iptables-save /usr/sbin/iptables-legacy-save && \ |
|
|
|
update-alternatives --install /usr/sbin/ip6tables ip6tables /usr/sbin/ip6tables-legacy 10 \ |
|
|
|
--slave /usr/sbin/ip6tables-restore ip6tables-restore /usr/sbin/ip6tables-legacy-restore \ |
|
|
|
--slave /usr/sbin/ip6tables-save ip6tables-save /usr/sbin/ip6tables-legacy-save |
|
|
|
|
|
|
|
# Set Environment |
|
|
|
ENV DEBUG=Server,WireGuard,Database,CMD |
|
|
|
# NOTE: DEBUG is intentionally not set here; pass via -e DEBUG=... at runtime if needed |
|
|
|
ENV PORT=51821 |
|
|
|
ENV HOST=0.0.0.0 |
|
|
|
ENV INSECURE=true |
|
|
|
|
