aionforge-memory/Dockerfile at development · jscott3201/aionforge-memory · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# syntax=docker/dockerfile:1.7

FROM rust:1.95.0-bookworm AS builder

ARG AIONFORGE_BUILD_SHA
ARG AIONFORGE_BUILD_STATUS
ARG AIONFORGE_BUILD_TIMESTAMP

ENV CARGO_NET_GIT_FETCH_WITH_CLI=true
ENV AIONFORGE_BUILD_SHA=${AIONFORGE_BUILD_SHA}
ENV AIONFORGE_BUILD_STATUS=${AIONFORGE_BUILD_STATUS}
ENV AIONFORGE_BUILD_TIMESTAMP=${AIONFORGE_BUILD_TIMESTAMP}

WORKDIR /workspace

# hadolint ignore=DL3008
RUN apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates git \
    && rm -rf /var/lib/apt/lists/*

COPY . .

RUN cargo build --locked --release -p aionforge-cli

FROM node:24-bookworm-slim AS console-builder

ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0

WORKDIR /workspace/ui/console

COPY ui/console/package.json ui/console/pnpm-lock.yaml ./

RUN corepack enable \
    && corepack prepare pnpm@11.1.2 --activate \
    && pnpm install --frozen-lockfile

COPY ui/console ./

RUN pnpm build

FROM scratch AS binary-artifact

COPY --from=builder /workspace/target/release/aionforge /aionforge
COPY --from=console-builder /workspace/ui/console/build /console

FROM debian:bookworm-slim AS runtime

LABEL org.opencontainers.image.source="https://github.com/jscott3201/aionforge-memory"
LABEL org.opencontainers.image.description="Aionforge Memory single-binary MCP server"

ENV AIONFORGE_PERSISTENCE__DATA_DIR=/data
ENV AIONFORGE_CONSOLE_DIST_DIR=/usr/local/share/aionforge/console

# hadolint ignore=DL3008
RUN apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && groupadd --system --gid 10001 aionforge \
    && useradd --system --no-create-home --home-dir /nonexistent --gid aionforge --uid 10001 aionforge \
    && mkdir -p /data \
    && chmod 700 /data \
    && chown -R 10001:10001 /data

COPY --from=builder /workspace/target/release/aionforge /usr/local/bin/aionforge
COPY --from=console-builder /workspace/ui/console/build /usr/local/share/aionforge/console

USER 10001:10001
WORKDIR /data
VOLUME ["/data"]
EXPOSE 3918
STOPSIGNAL SIGTERM

ENTRYPOINT ["/usr/local/bin/aionforge"]
CMD ["serve", "http", "--listen", "0.0.0.0:3918", "--data-dir", "/data"]