docker: Ship certificates to the container (#126)

scratch is an empty container without any certs, this will
make sidekick fails to connect with MinIO with TLS configured.

This commit will copy the standard certs from the latest alpine
image to get the latest standard certificates.

Author: vadmeste

.github/workflows/go.yml

@@ -30,6 +30,6 @@ jobs:
         env:
           GO111MODULE: on
         run: |
-          curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin
+          curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/HEAD/install.sh | sh -s -- -b $(go env GOPATH)/bin
           $(go env GOPATH)/bin/golangci-lint run --timeout=5m --config ./.golangci.yml
           go test -v -race ./...

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.18
+FROM golang:1.24
 
 ADD go.mod /go/src/github.com/minio/sidekick/go.mod
 ADD go.sum /go/src/github.com/minio/sidekick/go.sum
@@ -18,5 +18,7 @@ MAINTAINER MinIO Development "[email protected]"
 EXPOSE 8080
 
 COPY --from=0 /go/src/github.com/minio/sidekick/sidekick /sidekick
+COPY --from=0 /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+
 
 ENTRYPOINT ["/sidekick"]

Dockerfile.release

@@ -1,5 +1,11 @@
+FROM alpine:latest as certs
+RUN apk --update add ca-certificates
+
 FROM scratch
 MAINTAINER MinIO Development "[email protected]"
 EXPOSE 8080
-COPY sidekick /sidekick
-ENTRYPOINT ["/sidekick"]
+
+COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
+COPY sidekick /bin/sidekick
+
+ENTRYPOINT ["/bin/sidekick"]