Skip to content

Fix strip choking on non-binary files; bump Alpine to 3.23 and implement multi-stage build #3029

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
biliwala wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Fix strip choking on non-binary files; bump Alpine to 3.23 and implement multi-stage build #3029

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
45173ba
Bump AlpineLinux to v3.19
vndroid Apr 7, 2026
6410fba
fix: stop strip from choking on non-binary files in Docker build
biliwala Mar 2, 2026
71b07a2
Bump Alpine version to 3.23 and reduce Docker image size via multi-st…
biliwala Jun 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 27 additions & 17 deletions docker/alpine/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,7 @@
FROM alpine:3.16
LABEL maintainer="kev <noreply@datageek.info>, Sah <contact@leesah.name>, vndroid <waveworkshop@outlook.com>"
FROM alpine:3.23 AS builder

ENV SERVER_ADDR=0.0.0.0
ENV SERVER_PORT=8388
ENV PASSWORD=
ENV METHOD=aes-256-gcm
ENV TIMEOUT=300
ENV DNS_ADDRS="8.8.8.8,8.8.4.4"
ENV TZ=UTC
ENV ARGS=
# Temporary root directory for build output
ENV DEST_DIR=/tmp/dest

COPY . /tmp/repo
RUN set -x \
Expand All @@ -28,20 +21,37 @@ RUN set -x \
&& mkdir -p build && cd build \
&& cmake .. -DCMAKE_INSTALL_PREFIX=/usr/local -DBUILD_TESTING=OFF -DWITH_STATIC=OFF -DCMAKE_BUILD_TYPE=Release \
&& make -j$(getconf _NPROCESSORS_ONLN) \
&& make install \
&& cd /usr/local/bin \
&& ls /usr/local/bin/ss-* | xargs -n1 setcap cap_net_bind_service+ep \
&& strip $(ls /usr/local/bin | grep -Ev 'ss-nat') \
&& apk del .build-deps \
&& mkdir -p ${DEST_DIR} \
&& make install DESTDIR=${DEST_DIR} \
&& cd ${DEST_DIR}/usr/local/bin \
&& ls ${DEST_DIR}/usr/local/bin/ss-* | xargs -n1 setcap cap_net_bind_service+ep \
&& strip $(scanelf --nobanner -E ET_DYN -E ET_EXEC ${DEST_DIR}/usr/local/bin/ss-* | awk '{print $2}')

# Final runtime environment
FROM alpine:3.23
LABEL maintainer="kev <noreply@datageek.info>, Sah <contact@leesah.name>, vndroid <waveworkshop@outlook.com>"

ENV SERVER_ADDR=0.0.0.0
ENV SERVER_PORT=8388
ENV PASSWORD=
ENV METHOD=aes-256-gcm
ENV TIMEOUT=300
ENV DNS_ADDRS="8.8.8.8,8.8.4.4"
ENV TZ=UTC
ENV ARGS=

# Import build artifacts from the builder stage
COPY --from=builder /tmp/dest/ /

RUN set -x \
# Runtime dependencies setup
&& apk add --no-cache \
ca-certificates \
rng-tools \
tzdata \
$(scanelf --needed --nobanner /usr/local/bin/ss-* \
| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
| sort -u) \
&& rm -rf /tmp/repo
| sort -u)

COPY ./docker/alpine/entrypoint.sh /usr/local/bin/docker-entrypoint.sh
ENTRYPOINT ["docker-entrypoint.sh"]
Expand Down
Loading