Dockerfile

# syntax=docker/dockerfile:1

ARG RUST_VERSION=1.94.0
ARG APP_NAME=agent-kitten
ARG UID=10001

FROM rust:${RUST_VERSION}-trixie AS build
ARG APP_NAME
ARG UID

ENV DEBIAN_FRONTEND=noninteractive
WORKDIR /app

RUN apt-get update \
    && apt-get install -y \
    cmake \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

COPY Cargo.toml Cargo.lock build.rs ./
COPY src/ ./src/

RUN --mount=type=cache,target=/app/target/ \
    --mount=type=cache,target=/usr/local/cargo/registry/ \
    cargo build --locked --release && cp target/release/${APP_NAME} /bin/server

FROM debian:trixie-slim AS final
ARG APP_NAME
ARG UID

LABEL vendor="ClowderTech LLC" \
    maintainer="ClowderTech LLC"

ENV DEBIAN_FRONTEND=noninteractive

RUN groupadd \
    --gid "${UID}" \
    --system \
    appuser \ 
    && useradd \
    --home-dir "/nonexistent" \
    --shell "/usr/sbin/nologin" \
    --uid "${UID}" \
    --gid "${UID}" \
    --no-log-init \
    --system \
    appuser

# Install only what's needed to run the binary
RUN apt-get update \
    && apt-get install -y \
    ca-certificates \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

USER appuser

# Copy the compiled binary from the build stage
COPY --from=build /bin/server /bin/server

# Start the server
CMD ["/bin/server"]