1ARG RUNTIME_IMAGE=gcr.io/distroless/cc-debian12
2ARG BUILDPLATFORM=linux/amd64
3
4# Precompile key slow-to-build dependencies
5FROM --platform=$BUILDPLATFORM golang:1.22-alpine as go-deps
6WORKDIR /linkerd-build
7COPY go.mod go.sum ./
8COPY bin/install-deps bin/
9RUN go mod download
10ARG TARGETARCH
11RUN ./bin/install-deps $TARGETARCH
12
13FROM --platform=$BUILDPLATFORM debian:bookworm-slim as fetch
14RUN DEBIAN_FRONTEND=noninteractive apt-get update && \
15 DEBIAN_FRONTEND=noninteractive apt-get install -y curl jq && \
16 rm -rf /var/lib/apt/lists/*
17WORKDIR /build
18COPY bin/fetch-proxy bin/fetch-proxy
19COPY bin/scurl bin/scurl
20ARG TARGETARCH
21ARG LINKERD2_PROXY_REPO="linkerd/linkerd2-proxy"
22ARG LINKERD2_PROXY_VERSION=""
23RUN --mount=type=secret,id=github \
24 export GITHUB_TOKEN_FILE=/run/secrets/github; \
25 proxy=$(bin/fetch-proxy "$LINKERD2_PROXY_VERSION" "$TARGETARCH"); \
26 mv "$proxy" linkerd2-proxy
27RUN echo "$LINKERD2_PROXY_VERSION" > proxy-version
28ARG LINKERD_AWAIT_VERSION=v0.2.9
29RUN bin/scurl -o linkerd-await https://github.com/linkerd/linkerd-await/releases/download/release%2F${LINKERD_AWAIT_VERSION}/linkerd-await-${LINKERD_AWAIT_VERSION}-${TARGETARCH} && chmod +x linkerd-await
30ARG LINKERD_VALIDATOR_VERSION=v0.1.2
31RUN bin/scurl -O https://github.com/linkerd/linkerd2-proxy-init/releases/download/validator%2F${LINKERD_VALIDATOR_VERSION}/linkerd-network-validator-${LINKERD_VALIDATOR_VERSION}-${TARGETARCH}.tgz
32RUN tar -zxvf linkerd-network-validator-${LINKERD_VALIDATOR_VERSION}-${TARGETARCH}.tgz && mv linkerd-network-validator-${LINKERD_VALIDATOR_VERSION}-${TARGETARCH}/linkerd-network-validator .
33
34## compile proxy-identity agent
35FROM go-deps as golang
36WORKDIR /linkerd-build
37COPY pkg/util pkg/util
38COPY pkg/flags pkg/flags
39COPY pkg/tls pkg/tls
40COPY pkg/version pkg/version
41ARG TARGETARCH
42RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH go build -mod=readonly ./pkg/...
43COPY proxy-identity proxy-identity
44RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH go build -o /out/proxy-identity -mod=readonly -ldflags "-s -w" ./proxy-identity
45
46FROM $RUNTIME_IMAGE as runtime
47COPY --from=fetch /build/target/proxy/LICENSE /usr/lib/linkerd/LICENSE
48COPY --from=fetch /build/proxy-version /usr/lib/linkerd/linkerd2-proxy-version.txt
49COPY --from=fetch /build/linkerd2-proxy /usr/lib/linkerd/linkerd2-proxy
50COPY --from=fetch /build/linkerd-await /usr/lib/linkerd/linkerd-await
51COPY --from=fetch /build/linkerd-network-validator /usr/lib/linkerd/linkerd2-network-validator
52COPY --from=golang /out/proxy-identity /usr/lib/linkerd/linkerd2-proxy-identity
53COPY --from=debian:bookworm-slim /bin/sleep /bin/sleep
54ARG LINKERD_VERSION
55ENV LINKERD_CONTAINER_VERSION_OVERRIDE=${LINKERD_VERSION}
56ENV LINKERD2_PROXY_LOG=warn,linkerd=info
57ENV LINKERD2_PROXY_LOG_FORMAT=plain
58ENTRYPOINT ["/usr/lib/linkerd/linkerd2-proxy-identity"]
View as plain text