mirror of
https://github.com/octoleo/syncthing.git
synced 2024-12-22 19:08:58 +00:00
361f7ae564
As it's not simple to run a container under Docker/Kubernetes as non-root but with additional capabilities, add an internal hack.
30 lines
731 B
Docker
30 lines
731 B
Docker
ARG GOVERSION=latest
|
|
FROM golang:$GOVERSION AS builder
|
|
|
|
WORKDIR /src
|
|
COPY . .
|
|
|
|
ENV CGO_ENABLED=0
|
|
ENV BUILD_HOST=syncthing.net
|
|
ENV BUILD_USER=docker
|
|
RUN rm -f syncthing && go run build.go -no-upgrade build syncthing
|
|
|
|
FROM alpine
|
|
|
|
EXPOSE 8384 22000/tcp 22000/udp 21027/udp
|
|
|
|
VOLUME ["/var/syncthing"]
|
|
|
|
RUN apk add --no-cache ca-certificates su-exec tzdata libcap
|
|
|
|
COPY --from=builder /src/syncthing /bin/syncthing
|
|
COPY --from=builder /src/script/docker-entrypoint.sh /bin/entrypoint.sh
|
|
|
|
ENV PUID=1000 PGID=1000 HOME=/var/syncthing PCAP=
|
|
|
|
HEALTHCHECK --interval=1m --timeout=10s \
|
|
CMD nc -z 127.0.0.1 8384 || exit 1
|
|
|
|
ENV STGUIADDRESS=0.0.0.0:8384
|
|
ENTRYPOINT ["/bin/entrypoint.sh", "/bin/syncthing", "-home", "/var/syncthing/config"]
|