Update distroless image (#474)

* move esbuild plugin to dev dependency

* update Dockerfile

now moves 'node_modules' installed with only
runtime deps to the final image

Author: skykanin

Dockerfile

@@ -4,14 +4,19 @@ RUN apk add pnpm
 
 COPY . .
 
-RUN pnpm install && pnpm run build
-RUN pnpm install --ignore-scripts vite-express
+RUN pnpm install
+RUN pnpm run build
+# Delete node_modules that contain dev deps and only install runtime deps
+# in the version that is copied to the final output
+RUN rm -rf node_modules/
+RUN pnpm install -P --ignore-scripts
 
 FROM gcr.io/distroless/nodejs20-debian12:debug-nonroot
 
 COPY --from=builder --chown=nonroot:nonroot --chmod=777 /usr/local/app/dist /app/dist/
 COPY --from=builder --chown=nonroot:nonroot --chmod=555 /usr/local/app/node_modules /app/node_modules
-COPY --from=builder --chown=nonroot:nonroot --chmod=555 /usr/local/app/package*.json /usr/local/app/server.js /app/
+COPY --from=builder --chown=nonroot:nonroot --chmod=444 /usr/local/app/package*.json /app/
+COPY --from=builder --chown=nonroot:nonroot --chmod=555 /usr/local/app/server.js /app/
 
 WORKDIR /app
 ENV NODE_ENV=production

package.json

@@ -19,7 +19,6 @@
     "@effect/platform": "^0.70.7",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.0",
-    "@esbuild-plugins/node-globals-polyfill": "^0.2.3",
     "@mui/material": "^5.17.1",
     "@statisticsnorway/ssb-component-library": "^2.4.9",
     "body-parser": "^1.20.3",
@@ -45,6 +44,7 @@
     "zustand": "^5.0.3"
   },
   "devDependencies": {
+    "@esbuild-plugins/node-globals-polyfill": "^0.2.3",
     "@eslint/compat": "^1.2.8",
     "@eslint/eslintrc": "^3.3.1",
     "@eslint/js": "^9.25.1",