Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 6935d292b4 | |||
| 3420824d7b | |||
| f3c2510a24 |
@@ -1,14 +0,0 @@
|
||||
.git
|
||||
.nogit
|
||||
node_modules
|
||||
dist
|
||||
dist_*
|
||||
coverage
|
||||
public
|
||||
pages
|
||||
.yarn
|
||||
.cache
|
||||
.rpt2_cache
|
||||
*.md
|
||||
!image_support_files/**
|
||||
test
|
||||
38
Dockerfile
38
Dockerfile
@@ -9,32 +9,29 @@ ENV NODE_VERSION_LTS="24.13.0" NODE_VERSION_STABLE="24.13.0" NVM_DIR="/usr/local
|
||||
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
|
||||
ENV CHROME_BIN=/usr/bin/chromium-browser
|
||||
|
||||
# Layer 1: Base system + dev tools
|
||||
# Set debconf to run non-interactively and install packages
|
||||
RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections \
|
||||
&& apt-get update \
|
||||
&& apt-get upgrade --no-install-recommends -y \
|
||||
&& apt-get install -y -q --no-install-recommends \
|
||||
# base libs
|
||||
software-properties-common \
|
||||
apt-transport-https \
|
||||
build-essential \
|
||||
ca-certificates \
|
||||
gpg-agent \
|
||||
curl \
|
||||
g++ \
|
||||
gcc \
|
||||
git \
|
||||
make \
|
||||
openssl \
|
||||
python3 \
|
||||
rsync \
|
||||
ssh \
|
||||
wget \
|
||||
unzip \
|
||||
iputils-ping \
|
||||
dnsutils \
|
||||
tini \
|
||||
&& apt-get clean
|
||||
|
||||
# Layer 2: Chromium + Puppeteer/Playwright browser deps
|
||||
RUN apt-get install -y -q --no-install-recommends \
|
||||
chromium-browser \
|
||||
# puppeteer
|
||||
libasound2t64 \
|
||||
libatk1.0-0 \
|
||||
libatk-bridge2.0-0 \
|
||||
@@ -66,26 +63,33 @@ RUN apt-get install -y -q --no-install-recommends \
|
||||
libxrender1 \
|
||||
libxss1 \
|
||||
libxtst6 \
|
||||
ca-certificates \
|
||||
fonts-liberation \
|
||||
libayatana-appindicator3-1 \
|
||||
libnss3 \
|
||||
lsb-release \
|
||||
xdg-utils \
|
||||
&& apt-get clean \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Layer 3: MongoDB 8.0
|
||||
RUN curl -fsSL https://www.mongodb.org/static/pgp/server-8.0.asc | \
|
||||
# network
|
||||
iputils-ping \
|
||||
dnsutils \
|
||||
# init
|
||||
tini \
|
||||
|
||||
# chromium (multi-arch compatible - works on both amd64 and arm64)
|
||||
&& apt-get install -y -q --no-install-recommends chromium-browser \
|
||||
|
||||
# mongodb 8.0
|
||||
&& curl -fsSL https://www.mongodb.org/static/pgp/server-8.0.asc | \
|
||||
gpg --dearmor -o /usr/share/keyrings/mongodb-server-8.0.gpg \
|
||||
&& echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-8.0.gpg ] https://repo.mongodb.org/apt/ubuntu noble/mongodb-org/8.0 multiverse" | \
|
||||
tee /etc/apt/sources.list.d/mongodb-org-8.0.list \
|
||||
&& apt-get update \
|
||||
&& apt-get install -y -q --no-install-recommends mongodb-org \
|
||||
&& apt-get clean \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
&& rm -r /var/lib/apt/lists/*
|
||||
|
||||
# Install nvm with node and npm
|
||||
RUN mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
RUN mkdir -p $NVM_DIR && curl https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
|
||||
# Make nvm available globally in all bash shells (interactive + non-interactive)
|
||||
# IMPORTANT: Prepend to bashrc, before the "[ -z "$PS1" ] && return" line
|
||||
@@ -119,7 +123,7 @@ RUN nvm install $NODE_VERSION_STABLE \
|
||||
&& pnpm -v \
|
||||
&& pnpm config set unsafe-perm true
|
||||
|
||||
ENV NODE_PATH $NVM_DIR/versions/node/v$NODE_VERSION_STABLE/lib/node_modules
|
||||
ENV NODE_PATH $NVM_DIR/v$NODE_VERSION_STABLE/lib/node_modules
|
||||
ENV PATH $NVM_DIR/versions/node/v$NODE_VERSION_STABLE/bin:$PATH
|
||||
|
||||
# Install Bun
|
||||
|
||||
@@ -20,7 +20,7 @@ RUN apk add --no-cache \
|
||||
tini
|
||||
|
||||
# Install NVM (latest version for better Alpine/musl support)
|
||||
RUN mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
RUN mkdir -p $NVM_DIR && curl https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
|
||||
# Make nvm available globally in all bash shells (interactive + non-interactive)
|
||||
# IMPORTANT: Create /etc/bash.bashrc with nvm initialization
|
||||
@@ -52,7 +52,7 @@ RUN NVM_MUSL_ARCH=$([ "$TARGETARCH" = "arm64" ] && echo "arm64-musl" || echo "x6
|
||||
&& curl -fsSL https://bun.sh/install | bash
|
||||
|
||||
ENV PATH="$BUN_INSTALL/bin:$NVM_DIR/versions/node/v$NODE_VERSION_LTS/bin:$PATH"
|
||||
ENV NODE_PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV NODE_PATH=$NVM_DIR/v$NODE_VERSION_LTS/lib/node_modules
|
||||
|
||||
# Set entrypoint to make nvm available in all runtime contexts
|
||||
ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/docker-entrypoint.sh"]
|
||||
|
||||
@@ -21,7 +21,7 @@ RUN apk add --no-cache \
|
||||
deno
|
||||
|
||||
# Install NVM (latest version for better Alpine/musl support)
|
||||
RUN mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
RUN mkdir -p $NVM_DIR && curl https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
|
||||
# Make nvm available globally in all bash shells (interactive + non-interactive)
|
||||
# IMPORTANT: Create /etc/bash.bashrc with nvm initialization
|
||||
@@ -52,7 +52,7 @@ RUN NVM_MUSL_ARCH=$([ "$TARGETARCH" = "arm64" ] && echo "arm64-musl" || echo "x6
|
||||
&& nvm use default
|
||||
|
||||
ENV PATH="$NVM_DIR/versions/node/v$NODE_VERSION_LTS/bin:$PATH"
|
||||
ENV NODE_PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV NODE_PATH=$NVM_DIR/v$NODE_VERSION_LTS/lib/node_modules
|
||||
|
||||
# Set entrypoint to make nvm available in all runtime contexts
|
||||
ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/docker-entrypoint.sh"]
|
||||
|
||||
@@ -26,7 +26,7 @@ RUN apk add --no-cache \
|
||||
tini
|
||||
|
||||
# Install NVM (latest version for better Alpine/musl support)
|
||||
RUN mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
RUN mkdir -p $NVM_DIR && curl https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
|
||||
# Make nvm available globally in all bash shells (interactive + non-interactive)
|
||||
# IMPORTANT: Create /etc/bash.bashrc with nvm initialization
|
||||
@@ -66,7 +66,7 @@ RUN NVM_MUSL_ARCH=$([ "$TARGETARCH" = "arm64" ] && echo "arm64-musl" || echo "x6
|
||||
&& pnpm -v \
|
||||
&& pnpm config set unsafe-perm true
|
||||
|
||||
ENV NODE_PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV NODE_PATH=$NVM_DIR/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/bin:$PATH
|
||||
|
||||
# Set entrypoint to make nvm available in all runtime contexts
|
||||
|
||||
@@ -1,11 +1,10 @@
|
||||
FROM host.today/ht-docker-node:alpine-node
|
||||
RUN apk update && apk add bash libc6-compat alpine-sdk
|
||||
ENV PYTHONUNBUFFERED=1
|
||||
RUN apk add --no-cache \
|
||||
libc6-compat \
|
||||
alpine-sdk \
|
||||
python3-dev \
|
||||
py3-pip \
|
||||
libffi-dev \
|
||||
openssl-dev \
|
||||
&& ln -sf python3 /usr/bin/python \
|
||||
&& pnpm install -g @ship.zone/szci node-gyp
|
||||
RUN apk add --update --no-cache python3 && ln -sf python3 /usr/bin/python
|
||||
RUN python3 -m ensurepip
|
||||
RUN pip3 install --no-cache --upgrade pip setuptools
|
||||
RUN apk add --update alpine-sdk && \
|
||||
apk add libffi-dev openssl-dev && \
|
||||
apk add python3-dev && \
|
||||
pnpm install -g @ship.zone/szci node-gyp
|
||||
@@ -1,63 +0,0 @@
|
||||
FROM docker:latest
|
||||
LABEL author="Task Venture Capital GmbH <hello@task.vc>"
|
||||
|
||||
WORKDIR /workspace
|
||||
|
||||
# Important environment variables
|
||||
ENV NODE_VERSION_LTS="24.13.0" \
|
||||
NVM_DIR="/usr/local/nvm" \
|
||||
PNPM_HOME="/root/.local/share/pnpm" \
|
||||
NVM_NODEJS_ORG_MIRROR="https://unofficial-builds.nodejs.org/download/release"
|
||||
|
||||
# System packages (single layer)
|
||||
# docker:latest already includes docker-cli and docker-compose plugin
|
||||
RUN apk add --no-cache \
|
||||
bash curl git openssl ca-certificates wget unzip \
|
||||
build-base python3 python3-dev py3-pip linux-headers \
|
||||
libgcc libstdc++ libc6-compat gnupg \
|
||||
libffi-dev openssl-dev libc-dev \
|
||||
iputils bind-tools \
|
||||
tini
|
||||
|
||||
# Install NVM
|
||||
RUN mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
|
||||
# Make nvm available globally in all bash shells
|
||||
RUN printf '%s\n%s\n%s\n' \
|
||||
'export NVM_DIR="/usr/local/nvm"' \
|
||||
'[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"' \
|
||||
'[ -s "$NVM_DIR/bash_completion" ] && . "$NVM_DIR/bash_completion"' \
|
||||
> /etc/bash.bashrc
|
||||
|
||||
# Copy nvm wrapper scripts
|
||||
COPY image_support_files/bash-with-nvm /usr/local/bin/bash-with-nvm
|
||||
COPY image_support_files/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
||||
RUN chmod +x /usr/local/bin/bash-with-nvm /usr/local/bin/docker-entrypoint.sh
|
||||
|
||||
# Use wrapper for RUN commands to enable nvm
|
||||
SHELL ["/usr/local/bin/bash-with-nvm"]
|
||||
|
||||
# Enable nvm for runtime bash commands
|
||||
ENV BASH_ENV=/etc/bash.bashrc
|
||||
|
||||
# Prepare pnpm directory
|
||||
RUN mkdir -p ${PNPM_HOME}
|
||||
ENV PATH="$PNPM_HOME:$PATH"
|
||||
|
||||
# Install Node.js LTS via NVM and pnpm
|
||||
# TARGETARCH fix: override nvm_get_arch for correct musl arch on arm64
|
||||
ARG TARGETARCH
|
||||
RUN NVM_MUSL_ARCH=$([ "$TARGETARCH" = "arm64" ] && echo "arm64-musl" || echo "x64-musl") \
|
||||
&& nvm_get_arch() { echo "$NVM_MUSL_ARCH"; } \
|
||||
&& nvm install $NODE_VERSION_LTS \
|
||||
&& nvm alias default $NODE_VERSION_LTS \
|
||||
&& nvm use default \
|
||||
&& npm install -g pnpm \
|
||||
&& pnpm -v \
|
||||
&& pnpm config set unsafe-perm true
|
||||
|
||||
ENV NODE_PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/bin:$PATH
|
||||
|
||||
ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/docker-entrypoint.sh"]
|
||||
CMD ["bash"]
|
||||
@@ -1,61 +0,0 @@
|
||||
FROM docker:dind
|
||||
LABEL author="Task Venture Capital GmbH <hello@task.vc>"
|
||||
|
||||
WORKDIR /workspace
|
||||
|
||||
# Important environment variables
|
||||
ENV NODE_VERSION_LTS="24.13.0" \
|
||||
NVM_DIR="/usr/local/nvm" \
|
||||
PNPM_HOME="/root/.local/share/pnpm" \
|
||||
NVM_NODEJS_ORG_MIRROR="https://unofficial-builds.nodejs.org/download/release"
|
||||
|
||||
# System packages
|
||||
RUN apk add --no-cache \
|
||||
bash curl git openssl ca-certificates wget unzip \
|
||||
build-base python3 python3-dev py3-pip linux-headers \
|
||||
libgcc libstdc++ libc6-compat gnupg \
|
||||
libffi-dev openssl-dev libc-dev \
|
||||
iputils bind-tools \
|
||||
tini
|
||||
|
||||
# Install NVM
|
||||
RUN mkdir -p $NVM_DIR && curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
|
||||
|
||||
# Make nvm available globally in all bash shells
|
||||
RUN printf '%s\n%s\n%s\n' \
|
||||
'export NVM_DIR="/usr/local/nvm"' \
|
||||
'[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"' \
|
||||
'[ -s "$NVM_DIR/bash_completion" ] && . "$NVM_DIR/bash_completion"' \
|
||||
> /etc/bash.bashrc
|
||||
|
||||
# Copy nvm wrapper for build-time SHELL
|
||||
COPY image_support_files/bash-with-nvm /usr/local/bin/bash-with-nvm
|
||||
RUN chmod +x /usr/local/bin/bash-with-nvm
|
||||
|
||||
# Use wrapper for RUN commands to enable nvm
|
||||
SHELL ["/usr/local/bin/bash-with-nvm"]
|
||||
|
||||
# Enable nvm for runtime bash commands (docker exec shells)
|
||||
ENV BASH_ENV=/etc/bash.bashrc
|
||||
|
||||
# Prepare pnpm directory
|
||||
RUN mkdir -p ${PNPM_HOME}
|
||||
ENV PATH="$PNPM_HOME:$PATH"
|
||||
|
||||
# Install Node.js LTS via NVM and pnpm
|
||||
# TARGETARCH fix: override nvm_get_arch for correct musl arch on arm64
|
||||
ARG TARGETARCH
|
||||
RUN NVM_MUSL_ARCH=$([ "$TARGETARCH" = "arm64" ] && echo "arm64-musl" || echo "x64-musl") \
|
||||
&& nvm_get_arch() { echo "$NVM_MUSL_ARCH"; } \
|
||||
&& nvm install $NODE_VERSION_LTS \
|
||||
&& nvm alias default $NODE_VERSION_LTS \
|
||||
&& nvm use default \
|
||||
&& npm install -g pnpm \
|
||||
&& pnpm -v \
|
||||
&& pnpm config set unsafe-perm true
|
||||
|
||||
ENV NODE_PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV PATH=$NVM_DIR/versions/node/v$NODE_VERSION_LTS/bin:$PATH
|
||||
|
||||
# Keep docker:dind's own ENTRYPOINT (dockerd-entrypoint.sh)
|
||||
# NVM is available in exec shells via BASH_ENV
|
||||
@@ -1,3 +0,0 @@
|
||||
FROM host.today/ht-docker-node:dbase
|
||||
LABEL author="Task Venture Capital GmbH <hello@task.vc>"
|
||||
RUN pnpm install -g @ship.zone/szci
|
||||
@@ -1,7 +1,12 @@
|
||||
FROM host.today/ht-docker-node:szci
|
||||
RUN pnpm install -g \
|
||||
RUN npm install -g \
|
||||
@git.zone/tsrun \
|
||||
@git.zone/tstest \
|
||||
@git.zone/tsdocker \
|
||||
@git.zone/tsbundle \
|
||||
@git.zone/tools
|
||||
@push.rocks/qenv \
|
||||
@push.rocks/smartfile \
|
||||
@push.rocks/smartpath \
|
||||
@push.rocks/smartshell \
|
||||
@push.rocks/tapbundle \
|
||||
axios \
|
||||
@push.rocks/smartdelay \
|
||||
@push.rocks/smartjson
|
||||
|
||||
@@ -4,5 +4,5 @@ LABEL author="Task Venture Capital GmbH <hello@task.vc>"
|
||||
RUN bash -c "source $NVM_DIR/nvm.sh \
|
||||
&& nvm install $NODE_VERSION_LTS"
|
||||
|
||||
ENV NODE_PATH $NVM_DIR/versions/node/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV NODE_PATH $NVM_DIR/v$NODE_VERSION_LTS/lib/node_modules
|
||||
ENV PATH $NVM_DIR/versions/node/v$NODE_VERSION_LTS/bin:$PATH
|
||||
36
changelog.md
36
changelog.md
@@ -1,41 +1,5 @@
|
||||
# Changelog
|
||||
|
||||
## 2026-02-07 - 5.6.0 - feat(dockerfiles)
|
||||
Add base Dockerfiles for dbase/dind, enable pnpm and stack-fix, update preinstalled image tooling and registries, and bump @git.zone/tsdocker devDependency
|
||||
|
||||
- Added Dockerfile_dbase: Alpine-based docker image with nodejs-current, pnpm installation, python/pip setup, compiles /lib/stack-fix.so and sets LD_PRELOAD, and enables pnpm unsafe-perm.
|
||||
- Added Dockerfile_dbase_dind: multi-stage docker:dind build that installs same toolchain, compiles stack-fix.so in build stage, copies pnpm/python artifacts to final stage, and preserves LD_PRELOAD.
|
||||
- Added Dockerfile_dbase_npmci: lightweight image FROM hosttoday/ht-docker-dbase:latest that installs @ship.zone/npmci globally via pnpm.
|
||||
- Updated Dockerfile_fossglobal_preinstalled_##version##: switched from npm to pnpm and replaced several global packages (removed push.rocks/* and axios; added @git.zone/tsdocker, @git.zone/tsbundle, @git.zone/tools).
|
||||
- Updated npmextra.json: cleared szci.dockerRegistries and simplified @git.zone/tsdocker registries/registryRepoMap to only use code.foss.global and preserved platforms/testDir.
|
||||
- Bumped devDependency @git.zone/tsdocker from ^1.17.0 to ^1.17.1 (patch bump).
|
||||
|
||||
## 2026-02-07 - 5.5.2 - fix()
|
||||
no changes detected — no release necessary
|
||||
|
||||
- No files changed in the provided git diff
|
||||
- Current package.json version is 5.5.1
|
||||
|
||||
## 2026-02-07 - 5.5.1 - fix(docker)
|
||||
normalize NODE_PATH and harden Dockerfile installs; use curl -fsSL; consolidate Alpine apk installs; update .dockerignore; bump @git.zone/tsdocker devDependency
|
||||
|
||||
- Change NODE_PATH to $NVM_DIR/versions/node/v... across Dockerfiles to match nvm layout
|
||||
- Use curl -fsSL for non-interactive installs
|
||||
- Run apt-get clean and remove /var/lib/apt/lists to reduce image size and ensure clean state
|
||||
- Consolidate apk add commands and ensure python3 symlink and pnpm global installs in Alpine image
|
||||
- Add .dockerignore entries to exclude build artifacts and include image_support_files
|
||||
- Bump devDependency @git.zone/tsdocker from ^1.15.1 to ^1.16.0
|
||||
|
||||
## 2026-02-07 - 5.5.0 - feat(docker)
|
||||
Rework Dockerfile into layered installs and add tooling (tini, chromium, MongoDB); simplify Alpine CI image Python/pip setup; add tsdocker devDependency; remove npmextra push flag; update README and registry links
|
||||
|
||||
- Dockerfile: split apt installs into logical layers, added tini, iputils-ping and dnsutils, moved chromium-browser into its own layer, and fixed apt cache cleanup (rm -rf)
|
||||
- Dockerfile: add MongoDB 8.0 apt repository and install in a dedicated layer
|
||||
- Alpine image (Dockerfile_alpine-szci): consolidated python3 and py3-pip install (removed ensurepip + manual pip upgrade)
|
||||
- package.json: add devDependency @git.zone/tsdocker@^1.15.1
|
||||
- npmextra.json: removed "push": false flag (affects CI/publish behavior)
|
||||
- README: update registry URLs to code.foss.global, document tini and NVM behavior, refresh image descriptions and links
|
||||
|
||||
## 2026-02-06 - 5.4.0 - feat(ci)
|
||||
replace npmci with szci across CI and images; add szci preinstalled images and make tini the PID 1 init in Docker images
|
||||
|
||||
|
||||
@@ -23,16 +23,24 @@
|
||||
}
|
||||
},
|
||||
"szci": {
|
||||
"dockerRegistries": []
|
||||
"dockerRegistries": [
|
||||
"docker.io",
|
||||
"registry.gitlab.com"
|
||||
]
|
||||
},
|
||||
"@git.zone/tsdocker": {
|
||||
"registries": [
|
||||
"code.foss.global"
|
||||
"code.foss.global",
|
||||
"registry.gitlab.com",
|
||||
"docker.io"
|
||||
],
|
||||
"registryRepoMap": {
|
||||
"code.foss.global": "host.today/ht-docker-node"
|
||||
"code.foss.global": "host.today/ht-docker-node",
|
||||
"registry.gitlab.com": "hosttoday/ht-docker-node",
|
||||
"docker.io": "hosttoday/ht-docker-node"
|
||||
},
|
||||
"platforms": ["linux/amd64", "linux/arm64"],
|
||||
"push": false,
|
||||
"testDir": "./test"
|
||||
},
|
||||
"tsdoc": {
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "ht-docker-node",
|
||||
"version": "5.6.0",
|
||||
"version": "5.4.0",
|
||||
"description": "A Docker image that integrates Node.js with shipzone.io support.",
|
||||
"main": "index.js",
|
||||
"scripts": {
|
||||
@@ -33,8 +33,5 @@
|
||||
"szci",
|
||||
"node version management",
|
||||
"typescript"
|
||||
],
|
||||
"devDependencies": {
|
||||
"@git.zone/tsdocker": "^1.17.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
3177
pnpm-lock.yaml
generated
3177
pnpm-lock.yaml
generated
File diff suppressed because it is too large
Load Diff
523
readme.md
523
readme.md
@@ -1,163 +1,122 @@
|
||||
# 🐳 ht-docker-node
|
||||
|
||||
> Production-ready Docker images for Node.js with NVM built in, multi-arch support, and modern runtimes (Bun, Deno). Every image ships with **tini** as PID 1 and full **NVM** integration — switch Node versions on the fly, no sourcing required.
|
||||
> Production-ready Docker images for Node.js development with multi-architecture support, modern runtimes, and intelligent version management.
|
||||
|
||||
**Multi-arch** • **Alpine & Ubuntu** • **NVM built-in** • **Bun, Deno & pnpm** • **tini init** • **CI/CD optimized**
|
||||
|
||||
## Issue Reporting and Security
|
||||
|
||||
For reporting bugs, issues, or security vulnerabilities, please visit [community.foss.global/](https://community.foss.global/). This is the central community hub for all issue reporting. Developers who sign and comply with our contribution agreement and go through identification can also get a [code.foss.global/](https://code.foss.global/) account to submit Pull Requests directly.
|
||||
**Multi-arch ready** • **Alpine & Ubuntu** • **NVM built-in** • **Bun, Deno & pnpm** • **CI/CD optimized**
|
||||
|
||||
---
|
||||
|
||||
## 🚀 Quick Start
|
||||
|
||||
```bash
|
||||
# Pull and run the full-featured Ubuntu image
|
||||
docker pull code.foss.global/host.today/ht-docker-node:latest
|
||||
docker run -it code.foss.global/host.today/ht-docker-node:latest
|
||||
# Pull and run the latest Node.js LTS image
|
||||
docker pull registry.gitlab.com/hosttoday/ht-docker-node:latest
|
||||
docker run -it registry.gitlab.com/hosttoday/ht-docker-node:latest
|
||||
|
||||
# Or go lean with Alpine (~200 MB vs ~900 MB)
|
||||
docker pull code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
docker run -it code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
# Or use Alpine for smaller images (200MB vs 800MB+)
|
||||
docker pull registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
```
|
||||
|
||||
NVM is ready the moment you enter the container — no manual sourcing, no `.bashrc` hacks:
|
||||
|
||||
```bash
|
||||
$ nvm install 22
|
||||
$ nvm use 22
|
||||
$ node -v # v22.x.x ✅
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 📦 Available Images
|
||||
|
||||
### Ubuntu-Based (Full-Featured)
|
||||
### Ubuntu-Based Images (Full-Featured)
|
||||
|
||||
Built on **Ubuntu 24.04**. Maximum compatibility, all build tools included, plus Chromium for Puppeteer/Playwright, and MongoDB 8.0.
|
||||
Perfect for complex builds requiring native dependencies and maximum compatibility.
|
||||
|
||||
| Tag | Description | Key Contents |
|
||||
|-----|-------------|--------------|
|
||||
| `:latest` | Kitchen-sink Node.js image | Node LTS + NVM + pnpm + Bun + Deno + Chromium + MongoDB 8.0 |
|
||||
| `:lts` | Alias of `:latest` | Same — explicit LTS naming for clarity |
|
||||
| `:szci` | CI/CD workhorse | `:latest` + `@ship.zone/szci` preinstalled |
|
||||
| `:fossglobal_preinstalled_<ver>` | Preloaded tooling image | `:szci` + tsrun, tstest, tapbundle, smartfile, and more |
|
||||
| Tag | Description | Use Case |
|
||||
|-----|-------------|----------|
|
||||
| `:latest` | Node.js LTS with NVM (Ubuntu 24.04) | General purpose, production builds |
|
||||
| `:lts` | Based on latest | Explicit LTS naming |
|
||||
| `:szci` | With szci preinstalled | CI/CD pipelines |
|
||||
|
||||
### Alpine-Based (Lightweight & Multi-Arch) ⚡
|
||||
> **All images include [tini](https://github.com/krallin/tini) as PID 1 init**, ensuring proper signal forwarding and zombie process reaping out of the box.
|
||||
|
||||
**40–75 % smaller** than Ubuntu. Native performance on **both amd64 and arm64** (Apple Silicon, Graviton, Ampere).
|
||||
### Alpine-Based Images (Lightweight & Multi-Arch) ⚡
|
||||
|
||||
**40-60% smaller** than Ubuntu images. Native performance on **both x64 and ARM64** (Apple Silicon, ARM servers).
|
||||
|
||||
| Tag | Description | Size | Architectures |
|
||||
|-----|-------------|------|---------------|
|
||||
| `:alpine-node` | Node.js LTS + NVM + pnpm | ~200 MB | amd64, arm64 |
|
||||
| `:alpine-bun` | Node.js LTS + NVM + Bun | ~150 MB | amd64, arm64 |
|
||||
| `:alpine-deno` | Node.js LTS + NVM + Deno | ~180 MB | amd64, arm64 |
|
||||
| `:alpine-szci` | Alpine Node + szci + build tools | ~250 MB | amd64, arm64 |
|
||||
| `:alpine-node` | Node.js LTS + NVM + pnpm | ~200MB | amd64, arm64 |
|
||||
| `:alpine-deno` | Node.js LTS + NVM + Deno | ~180MB | amd64, arm64 |
|
||||
| `:alpine-bun` | Node.js LTS + NVM + Bun | ~150MB | amd64, arm64 |
|
||||
| `:alpine-szci` | Alpine Node + szci + build tools | ~250MB | amd64, arm64 |
|
||||
|
||||
> 💡 Docker automatically pulls the right arch for your platform. Build on a Mac, deploy on an ARM server — same tag, native speed everywhere.
|
||||
**✨ Multi-architecture magic:** Docker automatically selects the right image for your platform. Build on Mac, deploy on Linux servers—same Dockerfile, native speed everywhere.
|
||||
|
||||
> **Note:** The Deno Alpine image uses `alpine:edge` to get the official musl-compiled Deno from the community repository.
|
||||
|
||||
### What every image includes
|
||||
|
||||
| Feature | Detail |
|
||||
|---------|--------|
|
||||
| **tini** | PID 1 init — proper signal forwarding & zombie reaping |
|
||||
| **NVM** | v0.40.1 — works in `RUN`, `docker exec`, CI scripts, interactive shells |
|
||||
| **Node.js** | LTS v24.13.0 (default, switchable) |
|
||||
| **docker-entrypoint.sh** | Loads NVM at runtime so `docker run … bash -c "nvm use 22"` just works |
|
||||
> **Note:** The Deno image uses Alpine edge to access the official musl-compiled Deno package from Alpine's community repository.
|
||||
|
||||
---
|
||||
|
||||
## 💡 Key Features
|
||||
|
||||
### 🔄 NVM — Zero-Config Node Version Management
|
||||
### 🔄 NVM (Node Version Manager) Built-In
|
||||
|
||||
NVM is pre-wired into every shell context. No manual sourcing required in any of these scenarios:
|
||||
|
||||
**Dockerfile RUN commands** (via the `bash-with-nvm` SHELL wrapper):
|
||||
Switch Node.js versions **instantly** without rebuilding images:
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:latest
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:latest
|
||||
|
||||
# Works directly — no sourcing needed!
|
||||
RUN nvm install 22 && nvm use 22 && npm ci
|
||||
RUN nvm alias default 22 # persists for later RUN steps
|
||||
# Works directly in RUN commands - no sourcing needed!
|
||||
RUN nvm install 18.20.0
|
||||
RUN nvm use 18 && npm install
|
||||
RUN nvm install 20 && nvm use 20 && npm test
|
||||
|
||||
# Set default for subsequent commands
|
||||
RUN nvm install 19 && nvm alias default 19
|
||||
```
|
||||
|
||||
**CI/CD scripts** (via `BASH_ENV=/etc/bash.bashrc`):
|
||||
### 🎯 CI/CD Workflow Ready
|
||||
|
||||
NVM works seamlessly in GitHub Actions, GitLab CI, and other automation:
|
||||
|
||||
```yaml
|
||||
# Gitea / GitLab CI
|
||||
# .gitlab-ci.yml
|
||||
test:
|
||||
image: code.foss.global/host.today/ht-docker-node:latest
|
||||
image: registry.gitlab.com/hosttoday/ht-docker-node:latest
|
||||
script:
|
||||
- nvm install 22 && nvm use 22
|
||||
- pnpm ci && pnpm test
|
||||
- nvm install 18
|
||||
- nvm use 18
|
||||
- npm ci
|
||||
- npm test
|
||||
|
||||
# Test on multiple Node versions
|
||||
- nvm install 20
|
||||
- nvm use 20
|
||||
- npm test
|
||||
```
|
||||
|
||||
**Interactive shells** and **`docker exec`**:
|
||||
|
||||
```bash
|
||||
docker exec -it mycontainer bash
|
||||
$ nvm ls # lists installed versions
|
||||
$ nvm install 20 # installs Node 20
|
||||
$ nvm use 20 # switches immediately
|
||||
```
|
||||
|
||||
> ⚠️ **Note on version persistence across RUN steps:** Each Dockerfile `RUN` starts a new shell. Use `nvm alias default <version>` to persist your choice, or chain commands in a single `RUN`.
|
||||
|
||||
### 🛡️ tini — Proper Init for Containers
|
||||
|
||||
All images use [tini](https://github.com/krallin/tini) as PID 1:
|
||||
|
||||
```
|
||||
tini → docker-entrypoint.sh → your command
|
||||
```
|
||||
|
||||
This means:
|
||||
- ✅ Signals (SIGTERM, SIGINT) are forwarded correctly to your app
|
||||
- ✅ Zombie processes are reaped automatically
|
||||
- ✅ Clean container shutdown — no orphaned processes
|
||||
|
||||
### 🌐 Chromium (Ubuntu `:latest` only)
|
||||
|
||||
Puppeteer and Playwright work out of the box:
|
||||
|
||||
```javascript
|
||||
const browser = await puppeteer.launch(); // uses /usr/bin/chromium-browser
|
||||
```
|
||||
|
||||
Environment variables `PUPPETEER_EXECUTABLE_PATH` and `CHROME_BIN` are pre-set. Multi-arch compatible (amd64 + arm64).
|
||||
|
||||
### 🏔️ Alpine — Production Optimized
|
||||
### 🏔️ Alpine: Production-Optimized
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
RUN nvm install 22 && nvm use 22
|
||||
RUN pnpm install && pnpm build
|
||||
# Result: ~200 MB image
|
||||
# Same NVM commands as Ubuntu
|
||||
RUN nvm install 20 && nvm use 20
|
||||
RUN pnpm install
|
||||
RUN pnpm build
|
||||
|
||||
# Result: 200MB image vs 800MB+ Ubuntu
|
||||
```
|
||||
|
||||
Why Alpine?
|
||||
- ✅ **60–75 % smaller** → Faster pulls, faster deploys
|
||||
- ✅ **Reduced attack surface** → Fewer packages = fewer CVEs
|
||||
- ✅ **Native musl builds** → No glibc compatibility layer
|
||||
- ✅ **Multi-arch** → Same tag works on x64 and ARM64
|
||||
**Why Alpine?**
|
||||
- ✅ **60-75% smaller images** → Faster deployments
|
||||
- ✅ **Reduced attack surface** → Better security
|
||||
- ✅ **Native musl builds** → No glibc compatibility issues
|
||||
- ✅ **Multi-arch support** → One image, all platforms
|
||||
|
||||
---
|
||||
|
||||
## 🛠️ Usage Examples
|
||||
|
||||
### Basic Node.js App
|
||||
### Basic Node.js Application
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# NVM is already configured, Node.js LTS is ready
|
||||
COPY package*.json ./
|
||||
RUN pnpm install
|
||||
|
||||
@@ -171,113 +130,135 @@ CMD ["node", "dist/index.js"]
|
||||
### Multi-Version Testing
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:latest
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:latest
|
||||
|
||||
WORKDIR /app
|
||||
COPY package*.json ./
|
||||
|
||||
RUN nvm install 20 && nvm use 20 && npm ci && npm test
|
||||
RUN nvm install 22 && nvm use 22 && npm ci && npm test
|
||||
# Test on Node 18
|
||||
RUN nvm install 18 && nvm use 18 && npm ci && npm test
|
||||
|
||||
# Ship with Node 22
|
||||
RUN nvm alias default 22 && npm run build
|
||||
# Test on Node 20
|
||||
RUN nvm install 20 && nvm use 20 && npm ci && npm test
|
||||
|
||||
# Use Node 20 for production build
|
||||
RUN nvm alias default 20 && npm run build
|
||||
```
|
||||
|
||||
### Deno Application
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-deno
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-deno
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Both Deno and Node.js are available
|
||||
COPY . .
|
||||
|
||||
# Deno and Node.js are both available
|
||||
# Use Deno for the app
|
||||
CMD ["deno", "run", "--allow-net", "main.ts"]
|
||||
|
||||
# Or switch to Node.js if needed
|
||||
# RUN nvm use default && npm install
|
||||
```
|
||||
|
||||
### Bun for Ultra-Fast Installs
|
||||
### Bun for Ultra-Fast Builds
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-bun
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-bun
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Bun is 10-20x faster for package installation
|
||||
COPY package.json bun.lockb ./
|
||||
RUN bun install
|
||||
|
||||
COPY . .
|
||||
RUN bun run build
|
||||
|
||||
# Node.js also available via NVM
|
||||
CMD ["bun", "run", "start"]
|
||||
```
|
||||
|
||||
### TypeScript Multi-Stage Build
|
||||
### TypeScript Project with Multi-Stage Build
|
||||
|
||||
```dockerfile
|
||||
# Build stage
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-node AS builder
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node AS builder
|
||||
|
||||
WORKDIR /app
|
||||
COPY package*.json ./
|
||||
RUN pnpm install
|
||||
|
||||
COPY tsconfig.json ./
|
||||
COPY src ./src
|
||||
RUN pnpm build
|
||||
|
||||
# Production stage — only runtime deps
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
# Production stage
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
WORKDIR /app
|
||||
COPY package*.json ./
|
||||
RUN pnpm install --prod
|
||||
|
||||
COPY --from=builder /app/dist ./dist
|
||||
EXPOSE 3000
|
||||
CMD ["node", "dist/index.js"]
|
||||
```
|
||||
|
||||
### Production-Hardened Setup
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
|
||||
# Non-root user
|
||||
RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
|
||||
|
||||
WORKDIR /app
|
||||
COPY package*.json ./
|
||||
RUN pnpm install --frozen-lockfile && pnpm cache clean
|
||||
|
||||
COPY --chown=nodejs:nodejs . .
|
||||
RUN pnpm build
|
||||
|
||||
USER nodejs
|
||||
EXPOSE 3000
|
||||
CMD ["node", "dist/index.js"]
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🔧 NVM Cheat Sheet
|
||||
## 🔧 NVM Usage Patterns
|
||||
|
||||
### In Dockerfiles
|
||||
|
||||
```dockerfile
|
||||
# Install specific version
|
||||
RUN nvm install 18.20.0
|
||||
|
||||
# Use version
|
||||
RUN nvm use 18
|
||||
|
||||
# Set default (persists across RUN commands)
|
||||
RUN nvm alias default 18
|
||||
|
||||
# Chain commands in single RUN
|
||||
RUN nvm install 19 && nvm use 19 && npm install
|
||||
```
|
||||
|
||||
### In CI/CD Scripts
|
||||
|
||||
```bash
|
||||
# Install a specific version
|
||||
nvm install 22.5.0
|
||||
#!/bin/bash
|
||||
# NVM is automatically available in bash scripts
|
||||
|
||||
# Use a version (current shell)
|
||||
nvm use 22
|
||||
nvm install 20
|
||||
nvm use 20
|
||||
npm ci
|
||||
npm test
|
||||
```
|
||||
|
||||
# Set default (persists across shells / RUN steps)
|
||||
nvm alias default 22
|
||||
|
||||
# Install and switch to latest LTS
|
||||
nvm install --lts && nvm use --lts
|
||||
### Version Switching
|
||||
|
||||
```bash
|
||||
# List installed versions
|
||||
nvm ls
|
||||
|
||||
# Chain in a single Dockerfile RUN
|
||||
RUN nvm install 22 && nvm use 22 && npm ci && npm test
|
||||
# Install and switch to latest LTS
|
||||
nvm install --lts
|
||||
nvm use --lts
|
||||
|
||||
# Install specific version
|
||||
nvm install 18.20.0
|
||||
|
||||
# Use installed version
|
||||
nvm use 18
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🏗️ Building the Images
|
||||
## 🏗️ Building Multi-Architecture Images
|
||||
|
||||
This project uses [@git.zone/tsdocker](https://code.foss.global/git.zone/tsdocker) for Docker image management.
|
||||
|
||||
@@ -285,59 +266,163 @@ This project uses [@git.zone/tsdocker](https://code.foss.global/git.zone/tsdocke
|
||||
# Install tsdocker
|
||||
pnpm install -g @git.zone/tsdocker@latest
|
||||
|
||||
# Discover all Dockerfiles and their tags
|
||||
# List all discovered Dockerfiles and their tags
|
||||
tsdocker list
|
||||
|
||||
# Build all images (multi-arch: amd64 + arm64)
|
||||
tsdocker build
|
||||
|
||||
# Run all test scripts
|
||||
# Test all images
|
||||
tsdocker test
|
||||
|
||||
# Push to a specific registry
|
||||
tsdocker push code.foss.global
|
||||
```
|
||||
|
||||
### Manual Build (single image)
|
||||
### Manual Builds
|
||||
|
||||
For building individual images manually:
|
||||
|
||||
```bash
|
||||
# Build for both amd64 and arm64, push to registry
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
-f Dockerfile_alpine-node \
|
||||
-t your-registry/your-image:alpine-node \
|
||||
--push .
|
||||
--push \
|
||||
.
|
||||
```
|
||||
|
||||
### Image Dependency Chain
|
||||
|
||||
Some images depend on others being in the registry first:
|
||||
|
||||
```
|
||||
Dockerfile (:latest) ──► Dockerfile_lts (:lts)
|
||||
──► Dockerfile_szci (:szci)
|
||||
──► Dockerfile_fossglobal_preinstalled_* (:fossglobal_preinstalled_<ver>)
|
||||
|
||||
Dockerfile_alpine-node (:alpine-node)
|
||||
──► Dockerfile_alpine-szci (:alpine-szci)
|
||||
```
|
||||
|
||||
The standalone Alpine images (`:alpine-bun`, `:alpine-deno`) have no registry dependencies.
|
||||
|
||||
---
|
||||
|
||||
## 📊 Image Comparison
|
||||
## 📚 Advanced Examples
|
||||
|
||||
| Feature | Ubuntu `:latest` | Alpine `:alpine-node` |
|
||||
|---------|------------------|----------------------|
|
||||
| Base Size | ~900 MB | ~200 MB |
|
||||
| Build Tools | ✅ Full (gcc, g++, make, python3) | ⚠️ Install separately (`apk add build-base`) |
|
||||
| Chromium | ✅ Pre-installed | ❌ |
|
||||
| MongoDB | ✅ 8.0 | ❌ |
|
||||
| Runtimes | Node + Bun + Deno + pnpm | Node + pnpm |
|
||||
| Compatibility | ✅ Maximum (glibc) | ✅ Good (musl) |
|
||||
| Multi-arch | ✅ amd64, arm64 | ✅ amd64, arm64 |
|
||||
| tini init | ✅ | ✅ |
|
||||
| Best for | Complex builds, E2E tests, full-stack dev | Production, CI/CD, microservices |
|
||||
### Docker Compose Setup
|
||||
|
||||
```yaml
|
||||
version: '3.8'
|
||||
|
||||
services:
|
||||
app:
|
||||
image: registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
working_dir: /app
|
||||
volumes:
|
||||
- .:/app
|
||||
- /app/node_modules
|
||||
ports:
|
||||
- "3000:3000"
|
||||
environment:
|
||||
- NODE_ENV=development
|
||||
command: sh -c "pnpm install && pnpm dev"
|
||||
|
||||
mongo:
|
||||
image: mongo:latest
|
||||
ports:
|
||||
- "27017:27017"
|
||||
```
|
||||
|
||||
### GitHub Actions Workflow
|
||||
|
||||
```yaml
|
||||
name: CI
|
||||
|
||||
on: [push, pull_request]
|
||||
|
||||
jobs:
|
||||
test:
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install dependencies
|
||||
run: pnpm install
|
||||
|
||||
- name: Run tests
|
||||
run: pnpm test
|
||||
|
||||
- name: Test on multiple Node versions
|
||||
run: |
|
||||
for version in 18 20; do
|
||||
echo "Testing on Node $version"
|
||||
nvm install $version
|
||||
nvm use $version
|
||||
pnpm test
|
||||
done
|
||||
```
|
||||
|
||||
### Custom Base Image
|
||||
|
||||
```dockerfile
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
# Add your custom tools
|
||||
RUN apk add --no-cache \
|
||||
python3 \
|
||||
make \
|
||||
g++ \
|
||||
postgresql-client
|
||||
|
||||
# Configure your environment
|
||||
ENV DATABASE_URL="postgresql://localhost/mydb"
|
||||
|
||||
# Your app setup
|
||||
WORKDIR /app
|
||||
COPY package.json pnpm-lock.yaml ./
|
||||
RUN pnpm install
|
||||
|
||||
COPY . .
|
||||
CMD ["pnpm", "start"]
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🎓 Best Practices
|
||||
|
||||
### ✅ DO
|
||||
|
||||
- **Use Alpine images for production** (smaller, more secure)
|
||||
- **Pin Node versions in production** (`nvm alias default 20.11.0`)
|
||||
- **Use multi-stage builds** to reduce final image size
|
||||
- **Leverage build cache** with proper COPY order
|
||||
- **Run as non-root user** in production
|
||||
|
||||
### ❌ DON'T
|
||||
|
||||
- Don't use `:latest` tag in production (be explicit)
|
||||
- Don't install packages globally if local works
|
||||
- Don't copy `node_modules` (let the build install them)
|
||||
- Don't skip `.dockerignore` (keeps builds fast)
|
||||
|
||||
### 🔒 Security Tips
|
||||
|
||||
```dockerfile
|
||||
# Example: Production-hardened Dockerfile
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
# Create non-root user
|
||||
RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Install deps as root
|
||||
COPY package*.json ./
|
||||
RUN pnpm install --frozen-lockfile && pnpm cache clean
|
||||
|
||||
# Copy source
|
||||
COPY --chown=nodejs:nodejs . .
|
||||
|
||||
# Build
|
||||
RUN pnpm build
|
||||
|
||||
# Switch to non-root user
|
||||
USER nodejs
|
||||
|
||||
EXPOSE 3000
|
||||
CMD ["node", "dist/index.js"]
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
@@ -345,64 +430,92 @@ The standalone Alpine images (`:alpine-bun`, `:alpine-deno`) have no registry de
|
||||
|
||||
### NVM command not found
|
||||
|
||||
Shouldn't happen in our images, but if it does:
|
||||
If NVM isn't available in your script:
|
||||
|
||||
```bash
|
||||
# Manually source NVM (shouldn't be needed in our images)
|
||||
export NVM_DIR="/usr/local/nvm"
|
||||
[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
|
||||
```
|
||||
|
||||
### Alpine native module build failures
|
||||
|
||||
Some npm packages require native build tools:
|
||||
Some npm packages need build tools:
|
||||
|
||||
```dockerfile
|
||||
FROM code.foss.global/host.today/ht-docker-node:alpine-node
|
||||
FROM registry.gitlab.com/hosttoday/ht-docker-node:alpine-node
|
||||
|
||||
# Install build dependencies
|
||||
RUN apk add --no-cache python3 make g++
|
||||
|
||||
# Now install your packages
|
||||
RUN pnpm install
|
||||
```
|
||||
|
||||
Or use `:alpine-szci` which ships with build tools pre-installed.
|
||||
|
||||
### Version not persisting across RUN steps
|
||||
|
||||
Each Dockerfile `RUN` creates a new shell. Use `nvm alias default`:
|
||||
### Permission denied errors
|
||||
|
||||
```dockerfile
|
||||
RUN nvm install 22 && nvm alias default 22
|
||||
RUN node -v # ✅ v22.x.x
|
||||
# Fix ownership before switching users
|
||||
COPY --chown=node:node . .
|
||||
USER node
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🔗 Links
|
||||
## 📊 Image Comparison
|
||||
|
||||
- **Source Code:** [code.foss.global/host.today/ht-docker-node](https://code.foss.global/host.today/ht-docker-node)
|
||||
- **NVM:** [github.com/nvm-sh/nvm](https://github.com/nvm-sh/nvm)
|
||||
- **tini:** [github.com/krallin/tini](https://github.com/krallin/tini)
|
||||
- **tsdocker:** [code.foss.global/git.zone/tsdocker](https://code.foss.global/git.zone/tsdocker)
|
||||
- **Alpine Linux:** [alpinelinux.org](https://alpinelinux.org/)
|
||||
- **Node.js Unofficial Builds:** [unofficial-builds.nodejs.org](https://unofficial-builds.nodejs.org/) (musl support)
|
||||
| Feature | Ubuntu `:latest` | Alpine `:alpine-node` |
|
||||
|---------|------------------|----------------------|
|
||||
| Base Size | ~900MB | ~200MB |
|
||||
| Build Tools | ✅ Full | ⚠️ Install separately |
|
||||
| Compatibility | ✅ Maximum | ✅ Good (musl) |
|
||||
| Multi-arch | ❌ amd64 only | ✅ amd64, arm64 |
|
||||
| Security | ✅ Good | ✅ Excellent (smaller surface) |
|
||||
| Speed | Fast | Faster (smaller) |
|
||||
| Use Case | Complex builds | Production, CI/CD |
|
||||
|
||||
---
|
||||
|
||||
## 🔗 Useful Links
|
||||
|
||||
- **GitHub Repository:** https://github.com/HostToday/ht-docker-node
|
||||
- **Docker Hub:** registry.gitlab.com/hosttoday/ht-docker-node
|
||||
- **NVM Documentation:** https://github.com/nvm-sh/nvm
|
||||
- **Alpine Linux:** https://alpinelinux.org/
|
||||
- **Node.js Unofficial Builds:** https://unofficial-builds.nodejs.org/ (musl support)
|
||||
|
||||
---
|
||||
|
||||
## 📋 Changelog
|
||||
|
||||
See [changelog.md](changelog.md) for detailed version history.
|
||||
|
||||
**Latest Updates (v5.0.148):**
|
||||
- ✨ Multi-architecture Alpine images (amd64 + arm64)
|
||||
- ✨ Native Deno support via Alpine edge
|
||||
- ✨ Bun runtime integration
|
||||
- ✨ Simplified image tags (`:alpine-node` vs `:alpine-x64-node`)
|
||||
- 🚀 docker buildx integration for cross-platform builds
|
||||
- 📦 pnpm preinstalled on Alpine Node image
|
||||
- 🔧 NVM 0.40.1 with improved Alpine/musl support
|
||||
|
||||
---
|
||||
|
||||
## License and Legal Information
|
||||
|
||||
This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the [LICENSE](./LICENSE) file.
|
||||
This repository contains open-source code that is licensed under the MIT License. A copy of the MIT License can be found in the [license](license) file within this repository.
|
||||
|
||||
**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
|
||||
|
||||
### Trademarks
|
||||
|
||||
This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.
|
||||
|
||||
Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.
|
||||
This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH and are not included within the scope of the MIT license granted herein. Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines, and any usage must be approved in writing by Task Venture Capital GmbH.
|
||||
|
||||
### Company Information
|
||||
|
||||
Task Venture Capital GmbH
|
||||
Registered at District Court Bremen HRB 35230 HB, Germany
|
||||
Registered at District court Bremen HRB 35230 HB, Germany
|
||||
|
||||
For any legal inquiries or further information, please contact us via email at hello@task.vc.
|
||||
For any legal inquiries or if you require further information, please contact us via email at hello@task.vc.
|
||||
|
||||
By using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.
|
||||
|
||||
Reference in New Issue
Block a user