pds/Dockerfile at main · grishaLR/pds · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# Stage 1: Build @atproto/pds from our fork
FROM node:20.20-alpine3.23 AS atproto-build

RUN corepack enable
RUN apk add --no-cache git python3 make g++

WORKDIR /atproto
# Clone the fork — use ARG so CI can override the branch
# CACHE_BUST arg invalidates the clone layer when the upstream repo changes
ARG ATPROTO_BRANCH=main
ARG CACHE_BUST=1
RUN git clone --depth 1 --branch ${ATPROTO_BRANCH} https://github.com/grishaLR/atproto.git .
RUN corepack prepare --activate
RUN pnpm install --no-frozen-lockfile
RUN pnpm --filter @atproto/pds... run build
# Pack the PDS package and its forked dependencies as tarballs for the service stage
RUN cd packages/pds && pnpm pack --pack-destination /tmp
RUN cd packages/oauth/oauth-provider && pnpm pack --pack-destination /tmp
RUN cd packages/oauth/oauth-provider-ui && pnpm pack --pack-destination /tmp

# Stage 2: Build goat + service
FROM node:20.20-alpine3.23 AS build

RUN corepack enable

# Build goat binary
ENV CGO_ENABLED=0
ENV GODEBUG="netdns=go"
WORKDIR /tmp
RUN apk add --no-cache git go
RUN git clone https://github.com/bluesky-social/goat.git && cd goat && git checkout v0.2.2 && go build -o /tmp/goat-build .

# Move files into the image and install
WORKDIR /app
COPY ./service ./

# Replace npm versions with our fork's tarballs (PDS + oauth-provider + oauth-provider-ui)
COPY --from=atproto-build /tmp/atproto-pds-*.tgz /tmp/
COPY --from=atproto-build /tmp/atproto-oauth-provider-*.tgz /tmp/
COPY --from=atproto-build /tmp/atproto-oauth-provider-ui-*.tgz /tmp/
RUN PDS_TARBALL=$(ls /tmp/atproto-pds-*.tgz | head -1) && \
    OAUTH_TARBALL=$(ls /tmp/atproto-oauth-provider-*.tgz | head -1) && \
    UI_TARBALL=$(ls /tmp/atproto-oauth-provider-ui-*.tgz | head -1) && \
    node -e " \
      const pkg = require('./package.json'); \
      pkg.dependencies['@atproto/pds'] = 'file:${PDS_TARBALL}'; \
      pkg.pnpm = pkg.pnpm || {}; \
      pkg.pnpm.overrides = pkg.pnpm.overrides || {}; \
      pkg.pnpm.overrides['@atproto/oauth-provider'] = 'file:${OAUTH_TARBALL}'; \
      pkg.pnpm.overrides['@atproto/oauth-provider-ui'] = 'file:${UI_TARBALL}'; \
      require('fs').writeFileSync('package.json', JSON.stringify(pkg, null, 2) + '\n'); \
    " && \
    rm -f pnpm-lock.yaml

RUN corepack prepare --activate
RUN pnpm install --production > /dev/null

# Stage 3: Final runtime image
FROM node:20.20-alpine3.23

RUN apk add --update dumb-init sqlite bash curl

# Avoid zombie processes, handle signal forwarding
ENTRYPOINT ["dumb-init", "--"]

WORKDIR /app
COPY --from=build /app /app
COPY --from=build /tmp/goat-build /usr/local/bin/goat
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

EXPOSE 3000
ENV PDS_PORT=3000
ENV NODE_ENV=production
# potential perf issues w/ io_uring on this version of node
ENV UV_USE_IO_URING=0

CMD ["entrypoint.sh"]

LABEL org.opencontainers.image.source=https://github.com/grishaLR/pds
LABEL org.opencontainers.image.description="protoimsg AT Protocol PDS"
LABEL org.opencontainers.image.licenses=MIT