284313f908
Some checks are pending
Bidi Control Character Guard / bidi-control-guard (push) Waiting to run
Circular Dependency Check / Check for new circular dependencies (push) Waiting to run
Citus Migration Smoke / Combined migrations on single-node Citus (push) Waiting to run
E2E Fresh Install Tests / fresh-install-e2e (push) Waiting to run
ext-v2 guardrails / Run ext-v2 guard and ESLint (push) Waiting to run
Integration Tests / Check for relevant changes (push) Waiting to run
Integration Tests / ${{ (github.event_name == 'schedule' || github.event.inputs.suite == 'full') && 'Full integration suite' || 'Tier-1 integration subset' }} (push) Blocked by required conditions
Mobile checks / Mobile lint + typecheck (push) Waiting to run
Mobile checks / Mobile unit tests (push) Waiting to run
Mobile checks / Mobile dependency audit (report) (push) Waiting to run
Mobile checks / Mobile reproducibility checks (push) Waiting to run
Secrets guard (env backups) / Ensure no tracked env backup files (push) Waiting to run
Temporal Readiness / fast-readiness (push) Waiting to run
Temporal Readiness / docker-parity (push) Waiting to run
TypeScript Type Check / Nx affected typecheck (push) Waiting to run
Unit Tests / Skipped-test budget (push) Waiting to run
Unit Tests / Nx affected unit tests (push) Waiting to run
Unit Tests / Server unit coverage (informational) (push) Waiting to run
Validate Tenant Management Schema / Check for relevant changes (push) Waiting to run
Validate Tenant Management Schema / Validate Tenant Management Schema (push) Blocked by required conditions
EE Workflows Build Guard / ee-workflows-build-guard (push) Waiting to run
Excluded: .git, node_modules, secrets/, compose.env, assemblyscript tgz Source: /opt/alga-psa on psa.joliet.tech
43 lines
1.1 KiB
Docker
43 lines
1.1 KiB
Docker
FROM node:22.5.1 AS builder
|
|
|
|
WORKDIR /app/hocuspocus
|
|
|
|
# Hocuspocus is a standalone package with its own lockfile; installing from the
|
|
# repo root pulls unrelated workspace deps and breaks the prebuilt CE path.
|
|
COPY hocuspocus/package.json ./package.json
|
|
COPY hocuspocus/package-lock.json ./package-lock.json
|
|
RUN npm ci --omit=dev
|
|
|
|
FROM node:22.5.1-slim
|
|
|
|
# Install required system dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
postgresql-client \
|
|
redis-tools \
|
|
curl \
|
|
gosu \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app/hocuspocus
|
|
|
|
# Create a non-root user
|
|
RUN groupadd -r nodejs && useradd -r -g nodejs nodejs
|
|
|
|
# Copy built node modules and service source files only.
|
|
COPY --from=builder /app/hocuspocus/node_modules ./node_modules
|
|
COPY hocuspocus/ ./
|
|
|
|
# Set up entrypoint script
|
|
RUN chmod +x ./entrypoint.sh
|
|
|
|
# Set ownership to the non-root user
|
|
RUN chown -R nodejs:nodejs /app
|
|
|
|
# The entrypoint starts as root so it can read Docker secret files that are
|
|
# intentionally chmod 600 on the host, then drops to nodejs before launching
|
|
# the Hocuspocus Node process.
|
|
|
|
EXPOSE 1234
|
|
|
|
ENTRYPOINT ["./entrypoint.sh"]
|