Dockerfile

# Dockerfile for building file_monitor
# This provides a reproducible build environment for the eBPF file monitor
FROM rust:1.92-bookworm AS builder

# Install system dependencies
RUN apt-get update && apt-get install -y \
    build-essential \
    clang \
    llvm \
    libelf-dev \
    linux-headers-generic \
    pkg-config \
    musl-tools \
    && rm -rf /var/lib/apt/lists/*

# Install Rust toolchains
RUN rustup toolchain install stable && \
    rustup toolchain install nightly --component rust-src && \
    rustup target add x86_64-unknown-linux-musl

# Install bpf-linker
RUN cargo install bpf-linker

# Set working directory
WORKDIR /workspace

# Copy the project files
COPY Cargo.toml Cargo.lock ./
COPY .cargo ./.cargo
COPY file_monitor ./file_monitor
COPY file_monitor-common ./file_monitor-common
COPY file_monitor-ebpf ./file_monitor-ebpf

# Build the project
# Using musl for static linking (easier deployment)
RUN cargo build --release --target x86_64-unknown-linux-musl

# Create a minimal runtime image
FROM scratch AS runtime

# Copy the binary from builder
COPY --from=builder /workspace/target/x86_64-unknown-linux-musl/release/file_monitor /file_monitor

# Note: This image cannot run directly as it requires kernel access for eBPF
# Extract the binary using:
# docker create --name temp file-monitor
# docker cp temp:/file_monitor ./file_monitor
# docker rm temp

# Alternatively, use the builder stage as a one-shot build container:
# docker run --rm -v $(pwd):/workspace file-monitor-builder \
#   cargo build --release --target x86_64-unknown-linux-musl

# For the builder image, set the default command
FROM builder AS default
CMD ["cargo", "build", "--release", "--target", "x86_64-unknown-linux-musl"]