Switch to distroless/static (#107)

kgaughan · Aug 25, 2024 · d6e1c2c · d6e1c2c
1 parent b60cb64
commit d6e1c2c
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -25,6 +25,7 @@ builds:
     mod_timestamp: "{{ .CommitTimestamp }}"
     tags:
       - netgo
+      - timetzdata
 
 brews:
   - name: planet-mercury

diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:latest
+FROM gcr.io/distroless/static:latest
 
 LABEL org.opencontainers.image.title=Mercury
 LABEL org.opencontainers.image.description="A Planet-style feed aggregator"
@@ -8,7 +8,6 @@ LABEL org.opencontainers.image.url=https://github.com/kgaughan/mercury
 LABEL org.opencontainers.image.source=https://github.com/kgaughan/mercury
 LABEL org.opencontainers.image.documentation=https://kgaughan.github.io/mercury/
 
-RUN apk --no-cache add ca-certificates tzdata
 COPY mercury .
 USER nobody
 ENTRYPOINT ["/mercury"]
diff --git a/Makefile b/Makefile
@@ -11,7 +11,7 @@ clean:
 	rm -rf $(NAME) dist site
 
 $(NAME): $(SOURCE) go.sum
-	CGO_ENABLED=0 go build -tags netgo -trimpath -ldflags '-s -w' -o $(NAME) ./cmd/$(NAME)
+	CGO_ENABLED=0 go build -tags netgo,timetzdata -trimpath -ldflags '-s -w' -o $(NAME) ./cmd/$(NAME)
 
 update:
 	go get -u ./...