Skip to content

feat(docker): switch to distroless #2164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Prashansa-K merged 4 commits into from
Aug 4, 2026
+8 −6
Merged

feat(docker): switch to distroless #2164

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
127f3f5
feat(docker): switch to distroless
zekth Jul 21, 2026
857b241
chore: added env HOME and changed base image to static-debian for siz…
Prashansa-K Aug 3, 2026
3abd9e6
Merge branch 'main' into feat/dockerfile-distroless
Prashansa-K Aug 3, 2026
6411a31
Merge branch 'main' into feat/dockerfile-distroless
harshadixit12 Aug 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 8 additions & 6 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,10 @@ ARG TAG
RUN CGO_ENABLED=0 GOOS=linux go build -o deck \
-ldflags "-s -w -X github.com/kong/deck/cmd.VERSION=$TAG -X github.com/kong/deck/cmd.COMMIT=$COMMIT"

FROM alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
FROM ghcr.io/jqlang/jq:1.8.2@sha256:b9c68867e5766576263a222e91db3de422d802069c7af70440e667a95344e486 AS jq

FROM gcr.io/distroless/static-debian12:nonroot@sha256:37d3baf4e657ce79c144b69b69f60b8542f366a64fb7a49bd99f5444ef008bb0

ARG COMMIT
ARG TAG
LABEL org.opencontainers.image.title="deck" \
Expand All @@ -21,8 +24,7 @@ LABEL org.opencontainers.image.title="deck" \
org.opencontainers.image.revision="$COMMIT" \
org.opencontainers.image.licenses="Apache-2.0" \
org.opencontainers.image.vendor="Kong Inc."
RUN adduser --disabled-password --gecos "" deckuser
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates jq
USER deckuser
COPY --from=build /deck/deck /usr/local/bin
ENTRYPOINT ["deck"]
USER nonroot
COPY --from=build /deck/deck /usr/local/bin/
COPY --from=jq /jq /usr/local/bin/jq
ENTRYPOINT ["deck"]