allow build scripts (really)

This commit is contained in:
2025-08-01 01:01:40 -04:00
parent 24dd8b1e99
commit 50c94b8e1e

View File

@@ -2,41 +2,36 @@ FROM arm64v8/node:22 AS base
ENV SHARP_IGNORE_GLOBAL_CLI_BINARIES=1 ENV SHARP_IGNORE_GLOBAL_CLI_BINARIES=1
ENV VIPS_DISABLE_DEPS=1 ENV VIPS_DISABLE_DEPS=1
ENV PNPM_SCRIPT_RUNNER_ALLOW_BUILD=true ENV PNPM_SCRIPT_RUNNER_ALLOW_BUILD=true
RUN corepack enable && corepack prepare pnpm@latest --activate RUN corepack enable
WORKDIR /app WORKDIR /app
FROM base AS builder FROM base AS builder
COPY package.json pnpm-lock.yaml ./ COPY package.json pnpm-lock.yaml ./
RUN --mount=type=cache,target=/root/.local/share/pnpm/store/v3 \ RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --frozen-lockfile --dangerously-allow-all-builds
pnpm install --frozen-lockfile
# copy source code
COPY . . COPY . .
RUN --mount=type=cache,target=/app/.vinxi \ # ^ copy source code
pnpm run build RUN --mount=type=cache,target=/app/.vinxi pnpm run build
# ^ produces .output (build artifact) and .vinxi (build cache) # ^ produces .output (build artifact) and .vinxi (build cache)
# take only the artifacts we need from the build
FROM base AS production_builder FROM base AS production_builder
RUN apt-get update && apt-get install -y jq RUN apt-get update && apt-get install -y jq
COPY --from=builder /app/package.json ./ COPY --from=builder /app/package.json ./
COPY --from=builder /app/pnpm-lock.yaml ./
# Create a new, production-only package files
RUN jq 'del(.devDependencies)' package.json > package.prod.json RUN jq 'del(.devDependencies)' package.json > package.prod.json
RUN --mount=type=cache,target=/root/.local/share/pnpm/store/v3 \ COPY --from=builder /app/pnpm-lock.yaml ./
pnpm install --prod --lockfile-only RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --prod --frozen-lockfile --dangerously-allow-all-builds
# Prod image # Prod image
FROM arm64v8/node:22-alpine FROM arm64v8/node:22-alpine
ENV SHARP_IGNORE_GLOBAL_CLI_BINARIES=1 ENV SHARP_IGNORE_GLOBAL_CLI_BINARIES=1
ENV VIPS_DISABLE_DEPS=1 ENV VIPS_DISABLE_DEPS=1
ENV PNPM_SCRIPT_RUNNER_ALLOW_BUILD=true ENV PNPM_SCRIPT_RUNNER_ALLOW_BUILD=true
RUN corepack enable && corepack prepare pnpm@latest --activate RUN corepack enable
WORKDIR /app WORKDIR /app
COPY --from=production_builder /app/package.prod.json ./package.json COPY --from=production_builder /app/package.prod.json ./package.json
COPY --from=production_builder /app/pnpm-lock.yaml ./pnpm-lock.yaml COPY --from=production_builder /app/pnpm-lock.yaml ./pnpm-lock.yaml
RUN --mount=type=cache,target=/root/.local/share/pnpm/store/v3 \ RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --prod --frozen-lockfile --dangerously-allow-all-builds
pnpm install --frozen-lockfile --prod
COPY --from=builder /app/.output ./.output COPY --from=builder /app/.output ./.output