b6e3f3f8dd
This PR makes changes in the Dockerfile to reduce the final image size. I'm sure this can be optimized further. But I didn't want to make too many changes at once. Original: ``` REPOSITORY TAG IMAGE ID CREATED SIZE codex latest c8f66942ded3 4 minutes ago 1.91GB ``` Now: ``` REPOSITORY TAG IMAGE ID CREATED SIZE codex latest 2a6d6450609c 4 minutes ago 747MB ```
57 lines
1.4 KiB
Docker
57 lines
1.4 KiB
Docker
FROM node:20-slim
|
|
|
|
ARG TZ
|
|
ENV TZ="$TZ"
|
|
|
|
# Install basic development tools, ca-certificates, and iptables/ipset, then clean up apt cache to reduce image size
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
aggregate \
|
|
ca-certificates \
|
|
curl \
|
|
dnsutils \
|
|
fzf \
|
|
gh \
|
|
git \
|
|
gnupg2 \
|
|
iproute2 \
|
|
ipset \
|
|
iptables \
|
|
jq \
|
|
less \
|
|
man-db \
|
|
procps \
|
|
sudo \
|
|
unzip \
|
|
ripgrep \
|
|
zsh \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Ensure default node user has access to /usr/local/share
|
|
RUN mkdir -p /usr/local/share/npm-global && \
|
|
chown -R node:node /usr/local/share
|
|
|
|
ARG USERNAME=node
|
|
|
|
# Set up non-root user
|
|
USER node
|
|
|
|
# Install global packages
|
|
ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global
|
|
ENV PATH=$PATH:/usr/local/share/npm-global/bin
|
|
|
|
# Install codex
|
|
COPY dist/codex.tgz codex.tgz
|
|
RUN npm install -g codex.tgz \
|
|
&& npm cache clean --force \
|
|
&& rm -rf /usr/local/share/npm-global/lib/node_modules/codex-cli/node_modules/.cache \
|
|
&& rm -rf /usr/local/share/npm-global/lib/node_modules/codex-cli/tests \
|
|
&& rm -rf /usr/local/share/npm-global/lib/node_modules/codex-cli/docs
|
|
|
|
# Copy and set up firewall script
|
|
COPY scripts/init_firewall.sh /usr/local/bin/
|
|
USER root
|
|
RUN chmod +x /usr/local/bin/init_firewall.sh && \
|
|
echo "node ALL=(root) NOPASSWD: /usr/local/bin/init_firewall.sh" > /etc/sudoers.d/node-firewall && \
|
|
chmod 0440 /etc/sudoers.d/node-firewall
|
|
USER node
|