Dockerfile

# Adapted from https://mitchellh.com/writing/nix-with-dockerfiles

# Nix builder
FROM nixos/nix:latest AS builder

# Copy our source and setup our working dir.
COPY . /tmp/build
WORKDIR /tmp/build

# Patch directories
RUN nix \
    --extra-experimental-features "nix-command flakes" \
    run nixpkgs\#gnused -- -i 's/\/usr\/share\/drasl/\/app\/share\/drasl/g' build_config.go

# Build our Nix environment
RUN nix \
    --extra-experimental-features "nix-command flakes" \
    --option filter-syscalls false \
    --print-build-logs \
    build

# Copy the Nix store closure into a directory. The Nix store closure is the
# entire set of Nix store values that we need for our build.
RUN mkdir /tmp/nix-store-closure
RUN cp -R $(nix-store -qR result/) /tmp/nix-store-closure

# Final image is based on scratch. We copy a bunch of Nix dependencies
# but they're fully self-contained so we don't need Nix anymore.
FROM scratch

WORKDIR /app

# Copy /nix/store
COPY --from=builder /tmp/nix-store-closure /nix/store
COPY --from=builder /tmp/build/result /app

COPY --from=alpine /etc/ssl /etc/ssl
COPY --from=debian /usr/share/zoneinfo /usr/share/zoneinfo

CMD ["/app/bin/drasl"]