updated paths to run as nonroot

Author: radupopa2010

Dockerfile

@@ -1,18 +1,12 @@
-FROM node:21.6-bookworm
+FROM node:21.6-bookworm as builder
 
 # Install dependencies
-# Tini allows us to avoid several Docker edge cases, see https://github.com/krallin/tini.
-# NOTE: See https://github.com/hexops/dockerfile#is-tini-still-required-in-2020-i-thought-docker-added-it-natively
-
-RUN apt-get update && apt-get install -y \
-    tini \
-    && rm -rf /var/lib/apt/lists/*
 
 # arguments
 ARG PORT=3000
 
 # Set up the directory
-WORKDIR /relayer-node
+WORKDIR /bundler
 
 # Copy package files
 COPY package.json yarn.lock  ./
@@ -26,6 +20,16 @@ COPY . /relayer-node
 # Build the application
 RUN yarn run build
 
+# Second stage
+FROM node:21.6-bookworm
+
+# Tini allows us to avoid several Docker edge cases, see https://github.com/krallin/tini.
+# NOTE: See https://github.com/hexops/dockerfile#is-tini-still-required-in-2020-i-thought-docker-added-it-natively
+
+RUN apt-get update && apt-get install -y \
+    tini \
+    && rm -rf /var/lib/apt/lists/*
+
 # Expose the port
 EXPOSE 3000
 
@@ -40,6 +44,10 @@ EXPOSE 3000
 RUN addgroup --gid 10001 --system nonroot \
   && adduser  --uid 10000 --system --ingroup nonroot --home /home/nonroot nonroot
 
+WORKDIR /home/nonroot/bundler
+COPY --from=builder --chown=10000:10001 /bundler /home/nonroot/bundler
+
+
 # Use the non-root user to run our application
 USER nonroot
 

Dockerfile.dev

@@ -1,18 +1,12 @@
-FROM node:21.6-bookworm
+FROM node:21.6-bookworm as builder
 
 # Install dependencies
-# Tini allows us to avoid several Docker edge cases, see https://github.com/krallin/tini.
-# NOTE: See https://github.com/hexops/dockerfile#is-tini-still-required-in-2020-i-thought-docker-added-it-natively
-
-RUN apt-get update && apt-get install -y \
-    tini \
-    && rm -rf /var/lib/apt/lists/*
 
 # arguments
 ARG PORT=3000
 
 # Set up the directory
-WORKDIR /home/nonroot/bundler
+WORKDIR /bundler
 
 # Copy package files
 COPY package.json yarn.lock  ./
@@ -23,6 +17,17 @@ RUN yarn install
 # Copy the rest of the files
 COPY . .
 
+# Second stage
+FROM node:21.6-bookworm
+
+# Tini allows us to avoid several Docker edge cases, see https://github.com/krallin/tini.
+# NOTE: See https://github.com/hexops/dockerfile#is-tini-still-required-in-2020-i-thought-docker-added-it-natively
+
+RUN apt-get update && apt-get install -y \
+    tini \
+    && rm -rf /var/lib/apt/lists/*
+
+
 # Expose the port
 EXPOSE 3000
 
@@ -37,6 +42,9 @@ EXPOSE 3000
 RUN addgroup --gid 10001 --system nonroot \
   && adduser  --uid 10000 --system --ingroup nonroot --home /home/nonroot nonroot
 
+WORKDIR /home/nonroot/bundler
+COPY --from=builder --chown=10000:10001 /bundler /home/nonroot/bundler
+
 # Use the non-root user to run our application
 USER nonroot
 

Dockerfile.helm

@@ -1,18 +1,12 @@
-FROM node:21.6-bookworm
+FROM node:21.6-bookworm as builder
 
 # Install dependencies
-# Tini allows us to avoid several Docker edge cases, see https://github.com/krallin/tini.
-# NOTE: See https://github.com/hexops/dockerfile#is-tini-still-required-in-2020-i-thought-docker-added-it-natively
-
-RUN apt-get update && apt-get install -y \
-    tini \
-    && rm -rf /var/lib/apt/lists/*
 
 # Arguments
 ARG PORT=3000
 
 # Set up the directory
-WORKDIR /relayer-node
+WORKDIR /bundler
 
 # Copy package files
 COPY package.json yarn.lock ./
@@ -21,11 +15,21 @@ COPY package.json yarn.lock ./
 RUN yarn install
 
 # Copy the rest of the files
-COPY . /relayer-node
+COPY . /bundler
 
 # Build the application
 RUN yarn run build
 
+# Second stage
+FROM node:21.6-bookworm
+
+# Tini allows us to avoid several Docker edge cases, see https://github.com/krallin/tini.
+# NOTE: See https://github.com/hexops/dockerfile#is-tini-still-required-in-2020-i-thought-docker-added-it-natively
+
+RUN apt-get update && apt-get install -y \
+    tini \
+    && rm -rf /var/lib/apt/lists/*
+
 # Expose the port
 EXPOSE 3000
 
@@ -40,6 +44,9 @@ EXPOSE 3000
 RUN addgroup --gid 10001 --system nonroot \
   && adduser  --uid 10000 --system --ingroup nonroot --home /home/nonroot nonroot
 
+WORKDIR /home/nonroot/bundler
+COPY --from=builder --chown=10000:10001 /bundler /home/nonroot/bundler
+
 # Use the non-root user to run our application
 USER nonroot
 

install-bundler/bundler/templates/statefulset.yaml

@@ -95,7 +95,7 @@ spec:
           {{- end }}
 
         volumeMounts:
-          - mountPath: "/relayer-node/config.json.enc"
+          - mountPath: "/home/nonroot/bundler/config.json.enc"
             name: gcpsecrets
             subPath: "config.json.enc"