Makefile.maker.yaml: add dockerfile.checkEnv

Author: majewsky

.dockerignore

@@ -7,13 +7,10 @@
 # TODO: uncomment when applications no longer use git to get version information
 #.git/
 /.github/
-/.gitignore
-/.golangci.yaml
 /.goreleaser.yml
 /.vscode/
 /CONTRIBUTING.md
 /Dockerfile
-/LICENSE*
 /Makefile.maker.yaml
 /README.md
 /build/

Dockerfile

@@ -11,6 +11,39 @@ RUN make -C /src install PREFIX=/pkg GOTOOLCHAIN=local GO_BUILDFLAGS='-mod vendo
 
 ################################################################################
 
+# To only build the tests run: docker build . --target test
+# We can't do `FROM builder AS test` here, as then make prepare-static-check would not be cached during interactive use when developing
+# and caching all the tools, especially golangci-lint, takes a few minutes.
+FROM golang:1.25.4-alpine3.22 AS test
+
+COPY Makefile /src/Makefile
+
+# used below by USER
+RUN addgroup -g 4200 appgroup \
+  && adduser -h /home/appuser -s /sbin/nologin -G appgroup -D -u 4200 appuser
+
+RUN apk add --no-cache --no-progress git make py3-pip \
+  && pip3 install --break-system-packages reuse \
+  && make -C /src prepare-static-check
+
+
+# We only copy here because we want the "prepare-static-check" to be cacheable.
+# It is not a problem that we are overwriting the go cache from the earlier steps because we do not need to rebuild those tools.
+COPY --from=builder /go /go
+COPY --from=builder /src /src
+
+RUN CHECK_SKIPS_FUNCTIONAL_TEST=true make -C /src static-check
+
+# Some things like postgres do not like to run as root. For simplicity, just always run as an unprivileged user,
+# but for it to be able to read the go cache, we need to allow it.
+RUN chmod 777 -R /src/
+USER 4200:4200
+RUN cd /src \
+  && git config --global --add safe.directory /src \
+  && CHECK_SKIPS_FUNCTIONAL_TEST=true make build/cover.out
+
+################################################################################
+
 FROM alpine:3.22
 
 RUN addgroup -g 4200 appgroup \

Makefile.maker.yaml

@@ -10,6 +10,8 @@ binaries:
 
 dockerfile:
   enabled: true
+  checkEnv:
+    - CHECK_SKIPS_FUNCTIONAL_TEST=true
   extraIgnores:
     - examples/
     - make-config.sh