minimal docker base image to build and deploy services and applications.

Three images provided:

1. go build image - umputun/baseimage:buildgo-latest. For build stage, includes go compiler and linters. Alpine based.
2. base application image umputun/baseimage:app-latest
3. scratch-based application image umputun/baseimage:scratch-latest

Image umputun/baseimage:buildgo-latest and ghcr.io/umputun/baseimage/buildgo:latest intends to be used in multi-stage Dockefile to build go applications and services.

• Relatively small, based on the official golang:alpine image
• Enforces CGO_ENABLED=0
• With fully installed and ready to use golangci-lint
• Add useful packages for building and testing - testify, mockery and moq
• Includes goreleaser and statik
• With goveralls for easy integration with coverage services and provided coverage.sh script to report coverage.
• /script/version.sh script to make git-based version

Image umputun/baseimage:app-latest and ghcr.io/umputun/baseimage/app:latest designed as a lightweight, ready-to-use base for various services. It adds a few things to the regular alpine image.

• ENTRYPOINT /init.sh runs CMD via dumb-init
• Container command runs under app user with uid $APP_UID (default 1001)
• Optionally runs /srv/init.sh if provided by custom container
• Packages tzdata, curl, su-exec, ca-certificates and openssl pre-installed
• Adds the user app (uid=1001)
• By default, enforces non-root execution of the command. Optional "/init-root.sh" can be used to run as root.

The container can be customized in runtime by setting environment from docker's command line or as a part of docker-compose.yml

• TIME_ZONE - set container's TZ, default "America/Chicago". For scratch-based TZ should be used instead
• APP_UID - UID of internal app user, default 1001

FROM umputun/baseimage:buildgo as build

WORKDIR /build
ADD . /build

RUN go test ./...
RUN golangci-lint run --out-format=tab --tests=false ./...

RUN \
    revision=$(/script/git-rev.sh) && \
    echo "revision=${revision}" && \
    go build -o app -ldflags "-X main.revision=$revision -s -w" .


FROM umputun/baseimage:app

COPY --from=build /build/app /srv/app

EXPOSE 8080
WORKDIR /srv

CMD ["/srv/app", "param1", "param2"]

It will make a container running "/srv/app" (with passed params) under 'app' user.

To customize both TIME_ZONE and UID - docker run -e TIME_ZONE=America/New_York -e APP_UID=2000 <image>

Image umputun/baseimage:scratch-latest (or ghcr.io/umputun/baseimage/scratch) adds a few extras to the scratch (empty) image:

• zoneinfo to allow change the timezone of the running application using the TZ environment variable
• SSL certificates (ca-certificates)
• /etc/passwd and /etc/groups with app user and group added (UID:1001, GID:1001)
• /nop program to wait forever and do nothing

Container sets user to app and working directory to /srv, no entrypoint set. In order to change time zone TZ env can be used.

The overall size of this image is about 512KB only, with 4MB download size due to parent layers.

# Build Stage
FROM umputun/baseimage:buildgo as build

WORKDIR /build
ADD . /build

RUN go test ./...
RUN golangci-lint run --out-format=tab --tests=false ./...

RUN \
    revision=$(/script/git-rev.sh) && \
    echo "revision=${revision}" && \
    go build -mod=vendor -o app -ldflags "-X main.revision=$revision -s -w" .


# Scratch-based Application Image
FROM umputun/baseimage:scratch-latest

COPY --from=build /build/app /srv/app

CMD ["/srv/app", "param1", "param2"]