Dockerfile

# ===== FIRST STAGE ======

FROM rust:1.82-bookworm as builder
LABEL description="This is the build stage for the wallet. Here we create the binary."

WORKDIR /wallet

# We are copying only the files we need for building
# As any changes in other files will make the multi-stage build useless
COPY src src
COPY graphql graphql
COPY Cargo.lock Cargo.lock
COPY Cargo.toml Cargo.toml

RUN cargo build --release

# ===== SECOND STAGE ======

FROM debian:bookworm-slim as runner
LABEL description="This is the 2nd stage: a very small image where we copy the wallet binary."
# reqwest needs libssl and curl is needed to install the ca-certificates
# awscli is needed for the start script to retrieve the secrets
RUN apt-get update && \
    apt-get install -y \
    libssl-dev \
    dos2unix \
    jq \
    curl \
    zip && \
    rm -rf /var/lib/apt/lists && \
    curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "/tmp/awscliv2.zip" && \
    unzip /tmp/awscliv2.zip -d /tmp/awscli && \
    /tmp/awscli/aws/install && \
    rm -rf /tmp/awscli*
RUN rm -rf /var/lib/apt/lists/*

# ===== THIRD STAGE ======

FROM runner

COPY --chmod=0755 ./scripts/start.sh /usr/local/bin
COPY --chmod=0755 --from=builder /wallet/target/release/wallet-daemon /usr/local/bin/wallet

RUN dos2unix /usr/local/bin/start.sh

# STORE_NAME = the storage name, this is a hex number which is the file name where the key is stored,
# it's generated when the key is generate (In the current example: `73723235301cb3057d43941d5f631613aa1661be0354d39e34f23d4ef527396b10d2bb7a`)
# SEED_PHRASE = These are the content of the key file, which are the bip-39 words used to generate the key.
# (In the current example: "duty captain man fantasy angry window release hammer suspect bullet panda special")
# KEY_PASS = The pass of the key which when originally generated is set through the `KEY_PASS` env variable. (In the current example: `example`)
# PLATFORM_KEY = The platform key is the API token used to authenticate the wallet daemon so it can request new transactions from the platform to sign.
CMD ["start.sh"]