docker-gunbot/Dockerfile at main · magicdude4eva/docker-gunbot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
# -----------------------------------------------------------------------------
#  Gunbot Docker Image (Colorised Edition)
#  Maintainer: https://github.com/magicdude4eva/docker-gunbot
#
#  Description:
#   Minimal Debian-based Gunbot container with colourised terminal output,
#   sane defaults, and Synology-friendly permissions. Uses multi-stage
#   build to avoid shipping the archive and extra tooling.
#
#  Features:
#   - Fetches official Gunthy bundle and prunes non-Linux/dev artefacts
#   - Read-only app payload in /opt/gunthy, persistent runtime data in /data
#   - Non-root user by default; gosu for UID/GID handoff as needed
#   - Clean apt layers; no upgrade; zip streamed/extracted in builder
#
# -----------------------------------------------------------------------------

# ---- builder: fetch & unpack vendor bundle ----------------------------------
FROM debian:bookworm-slim AS builder

ARG DEBIAN_FRONTEND=noninteractive
ARG INSTALL_URL="https://gunthy.org/downloads/gunthy_linux.zip"
ARG CACHEBUST=1
ARG TARGETPLATFORM
ARG TARGETARCH

# Tools only for build stage
RUN apt-get update && apt-get install -y --no-install-recommends \
      ca-certificates curl libarchive-tools \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /tmp/gunthy

# Stream-extract (no giant .zip left behind)
RUN echo "cb=${CACHEBUST}" >/dev/null \
 && curl -fsSL "${INSTALL_URL}?cb=${CACHEBUST}" | bsdtar -x -f - \
 && chmod 0555 /tmp/gunthy/gunthy-linux

# Conservative pruning (keeps runtime intact)
RUN find /tmp/gunthy -type f -name "index_osx.node" -delete \
 && find /tmp/gunthy -type f -name "index_win.node" -delete \
 && find /tmp/gunthy -type f -name "*.map" -delete \
 && rm -rf /tmp/gunthy/node_modules/@neon-exchange/nash-protocol-gunbot/docs || true \
 && rm -f /tmp/gunthy/node_modules/technicalindicators/dist/browser*.js \
          /tmp/gunthy/node_modules/technicalindicators/dist/*.map \
          /tmp/gunthy/node_modules/technicalindicators/images/* || true

# ---- final: runtime only ----------------------------------------------------
FROM debian:bookworm-slim

# ----- OCI labels (populate via --build-arg) ---------------------------------
LABEL org.opencontainers.image.title="Gunbot (Colorised)" \
      org.opencontainers.image.description="Debian-based Gunbot with colourised console, slim layers, and Synology-friendly defaults." \
      org.opencontainers.image.url="https://hub.docker.com/r/magicdude4eva/gunbot-colorised" \
      org.opencontainers.image.source="https://github.com/magicdude4eva/docker-gunbot" \
      org.opencontainers.image.documentation="https://github.com/magicdude4eva/docker-gunbot" \
      maintainer="Gerd Naschenweng <https://github.com/magicdude4eva>"

ARG DEBIAN_FRONTEND=noninteractive
ENV TZ=Europe/Vienna \
    TERM=xterm-256color \
    FORCE_COLOR=true \
    NPM_CONFIG_COLOR=always \
    GUNTHY_HOME=/opt/gunthy \
    GUNTHY_DATA=/data

# Minimal runtime deps (no apt upgrade)
RUN apt-get update && apt-get install -y --no-install-recommends \
      ca-certificates gosu tzdata bash fontconfig fonts-dejavu-core \
    && rm -rf /var/lib/apt/lists/*

# Non-root runtime user
RUN useradd -r -m -d /home/gunthy -s /usr/sbin/nologin gunthy

# App payload (ownership at copy time; no recursive chown layer)
COPY --from=builder --chown=gunthy:gunthy /tmp/gunthy/ ${GUNTHY_HOME}/

# Entrypoint (idempotent, keeps /data chown fast on Synology)
COPY --chown=root:root docker-entrypoint.sh /docker-entrypoint.sh
RUN chmod 0555 /docker-entrypoint.sh

# Ports exposed by Gunbot (API/UI etc.)
EXPOSE 3000 3001 5000 5001

# Persistent data volume (configs, logs, runtime artefacts)
WORKDIR ${GUNTHY_DATA}
VOLUME ["${GUNTHY_DATA}"]

ENTRYPOINT ["/docker-entrypoint.sh"]