COPY keeps the source file's mode; a 600 file (local checkouts) left uid 101 unable to read it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
22 lines
889 B
Docker
22 lines
889 B
Docker
FROM cypress/base:26.0.0@sha256:446be8fcb63e3cad2f9a4e14720e3d8e35993e12f36da541e09f5740a4c2477c as builder
|
|
WORKDIR /build
|
|
|
|
RUN npm install --global node-gyp && \
|
|
git config --global --add safe.directory /build
|
|
|
|
COPY ./package.json ./package-lock.json ./
|
|
RUN npm ci --no-progress
|
|
COPY . /build
|
|
RUN npm run postinstall && npm run generate && npm run lint && npm run test:coverage
|
|
|
|
FROM scratch as export
|
|
COPY --from=builder /build/coverage /
|
|
|
|
# Unprivileged (uid 101, port 8080): Frostmoln enforces restricted Pod Security.
|
|
FROM nginxinc/nginx-unprivileged:1.31.6@sha256:1d26a516fb93b18f9c0214dc9c645054486e516f13ff09ef63d5bd5c622278a2
|
|
MAINTAINER Joakim Olsson <joakim@unbound.se>
|
|
|
|
COPY --chmod=644 ./nginx/nginx.conf /etc/nginx/nginx.conf
|
|
COPY --chmod=644 ./nginx/security_headers.conf /etc/nginx/security_headers.conf
|
|
COPY --from=builder /build/.output/public/ /usr/share/nginx/html/
|