nix -> Dockerfile

Author: gigamonster256

.github/workflows/build-and-deploy.yaml

@@ -15,8 +15,10 @@ jobs:
         fetch-depth: 0
     - uses: DeterminateSystems/nix-installer-action@main
     - uses: DeterminateSystems/flakehub-cache-action@main
-    - name: Build and load image
-      run: docker load <$(nix build --extra-experimental-features "nix-command flakes" --print-out-paths --no-link .#packages.x86_64-linux.docker)
+    - name: Build binary
+      run: nix build --extra-experimental-features "nix-command flakes" .#packages.x86_64-linux.webdavplugin
+    - name: Build docker image
+      run: docker build -t $IMAGE_NAME .
     - name: Log in to registry
       run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
     - name: Push image

Dockerfile

@@ -0,0 +1,8 @@
+FROM debian:bullseye
+
+ARG binary=./result/bin/webdav
+COPY ${binary} /webdav
+
+RUN apt update && apt install -y davfs2
+
+ENTRYPOINT ["/webdav"]

flake.nix

@@ -28,28 +28,6 @@
         webdavplugin = callPackage ./. {
           inherit (gomod2nix.legacyPackages.${system}) buildGoApplication;
         };
-
-        docker = pkgs.dockerTools.buildImage {
-          name = "webdavplugin";
-          tag = "latest";
-          contents = pkgs.buildEnv {
-            name = "image-root";
-            paths = with pkgs; [
-              mount
-              davfs2
-            ];
-          };
-          # https://nixos.org/manual/nixpkgs/stable/#ssec-pkgs-dockerTools-shadowSetup
-          runAsRoot = ''
-            ${pkgs.dockerTools.shadowSetup}
-            groupadd -r davfs2
-            useradd -r -g davfs2 davfs2
-            ln -s /proc/mounts /etc/mtab # davfs2 needs this
-            mkdir -p /var/cache/davfs2
-            chmod 0600 /etc/davfs2/secrets # reset permissions
-          '';
-          config.Entrypoint = ["${webdavplugin}/bin/webdav"];
-        };
       };
       devShells.default = callPackage ./shell.nix {
         inherit (gomod2nix.legacyPackages.${system}) mkGoEnv gomod2nix;