Revert "build(docker): Switch to Docker Hardened Images (DHI) (#214)" (#215)

This reverts commit 8d4b5e2.

Author: malwilley

Dockerfile

@@ -1,43 +1,38 @@
-FROM us-docker.pkg.dev/sentryio/dhi/node:24-debian13-dev AS builder
+FROM node:24.14.0 AS builder
 
-WORKDIR /build
-
-COPY package.json yarn.lock ./
+COPY package.json yarn.lock .
 RUN yarn install --frozen-lockfile
 
 COPY tsconfig.json .
 COPY src src
 RUN yarn build
 
-# Drop devDependencies from node_modules for the runtime image
-RUN yarn install --frozen-lockfile --production
+FROM node:24.14.0-slim
 
-# canvas 3.x bundles its graphics libs (libcairo, libpango, etc.) but its
-# bundled librsvg/glib still need a few basic system libs absent from the
-# minimal runtime image. Collect them here to copy in without pulling the
-# entire -dev system into the runtime.
-RUN mkdir -p /canvas-sys-libs && \
-    find /lib /usr/lib -maxdepth 3 \( \
-        -name "libz.so.1*" -o \
-        -name "libexpat.so.1*" -o \
-        -name "libuuid.so.1*" -o \
-        -name "liblzma.so.5*" \
-    \) -exec cp -P --parents {} /canvas-sys-libs/ \;
+ENV NODE_ENV=production
 
+RUN npm install -g npm@latest \
+    && npm cache clean --force
 
-FROM us-docker.pkg.dev/sentryio/dhi/node:24-debian13
-
-ENV NODE_ENV=production
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        build-essential \
+        libcairo2-dev \
+        libpango1.0-dev \
+        libjpeg-dev \
+        libgif-dev \
+        librsvg2-dev \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /usr/src/app
 
-COPY package.json ./
+COPY package.json yarn.lock ./
+RUN yarn install --frozen-lockfile \
+    && yarn cache clean
+
 COPY fonts fonts
-COPY --from=builder /build/node_modules node_modules
-COPY --from=builder /build/lib lib
-COPY --from=builder /canvas-sys-libs/ /
+COPY --from=builder lib lib
 
-RUN ["node", "lib/index.js", "--help"]
+RUN node lib/index.js --help
 
 EXPOSE 9090/tcp
 CMD ["node", "./lib/index.js", "server", "9090"]

devservices/config.yml

@@ -25,7 +25,7 @@ services:
     labels:
       - orchestrator=devservices
     healthcheck:
-      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:9090/api/chartcuterie/healthcheck/live').then(r=>r.ok?0:1,()=>1).then(process.exit)"]
+      test: python3 -c "import urllib.request; urllib.request.urlopen(\"http://127.0.0.1:9090/api/chartcuterie/healthcheck/live\", timeout=5)"
       interval: 5s
       timeout: 5s
       retries: 3