Dockerfile.medsense-source

FROM node:22.16.0-bullseye AS build

ENV DEBIAN_FRONTEND=noninteractive

RUN echo "[build] apt-get deps (build stage) start" \
  && apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    g++ \
    git \
    make \
    python3 \
  && rm -rf /var/lib/apt/lists/* \
  && echo "[build] apt-get deps (build stage) done"

RUN echo "[build] meteor install start" \
  && curl -fsSL https://install.meteor.com/ | sh \
  && echo "[build] meteor install done"

RUN echo "[build] create app user + corepack start" \
  && useradd --create-home --shell /bin/bash app \
  && corepack enable \
  && corepack prepare yarn@4.11.0 --activate \
  && echo "[build] create app user + corepack done"

WORKDIR /app

COPY --chown=app:app . .

RUN echo "[build] prepare /app/bundle start" \
  && mkdir -p /app/bundle \
  && chown -R app:app /app/bundle \
  && echo "[build] prepare /app/bundle done"

USER app

RUN if [ -d /app/prebuilt/bundle ]; then \
  echo "[build] using prebuilt bundle from /app/prebuilt/bundle"; \
  mkdir -p /app/bundle; \
  cp -a /app/prebuilt/bundle/. /app/bundle/; \
else \
  echo "[build] no prebuilt bundle found; running full build"; \
  echo "[build] yarn install --immutable start"; \
  git config --global --add safe.directory /app; \
  yarn install --immutable; \
  echo "[build] yarn install --immutable done"; \
  echo "[build] ui-kit packages build start"; \
  yarn workspace @rocket.chat/ui-kit build; \
  yarn workspace @rocket.chat/fuselage-ui-kit build; \
  echo "[build] ui-kit packages build done"; \
  echo "[build] message-parser package build start"; \
  yarn workspace @rocket.chat/message-parser build; \
  echo "[build] message-parser package build done"; \
  echo "[build] core-typings package build start"; \
  yarn workspace @rocket.chat/core-typings build; \
  echo "[build] core-typings package build done"; \
  echo "[build] rest-typings package build start"; \
  yarn workspace @rocket.chat/rest-typings build; \
  echo "[build] rest-typings package build done"; \
  echo "[build] model-typings package build start"; \
  yarn workspace @rocket.chat/model-typings build; \
  echo "[build] model-typings package build done"; \
  echo "[build] models package build start"; \
  yarn workspace @rocket.chat/models build; \
  echo "[build] models package build done"; \
  echo "[build] meteor build:ci start"; \
  cd apps/meteor; \
  mkdir -p /tmp/meteor-cache /tmp/meteor-local; \
  METEOR_CACHE_DIR=/tmp/meteor-cache METEOR_LOCAL_DIR=/tmp/meteor-local \
     METEOR_DISABLE_OPTIMISTIC_CACHING=1 METEOR_DEBUG_BUILD=1 yarn build:ci; \
  rm -rf /app/bundle/*; \
  cp -a /tmp/dist/bundle/. /app/bundle/; \
  echo "[build] meteor build:ci done"; \
fi
FROM node:22.16.0-bullseye

  ENV NODE_ENV=production \
      DENO_VERSION=1.44.0 \
    DENO_DIR=/app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/.deno-cache \
    NODE_PATH=/app/bundle/programs/server/npm/node_modules \
    HOME=/tmp

WORKDIR /app/bundle

RUN echo "[build] apt-get deps (runtime stage) start" \
  && apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    g++ \
    make \
    python3 \
    unzip \
  && curl -fsSL https://github.com/denoland/deno/releases/download/v${DENO_VERSION}/deno-x86_64-unknown-linux-gnu.zip -o /tmp/deno.zip \
  && unzip -q /tmp/deno.zip -d /usr/local/bin \
  && chmod +x /usr/local/bin/deno \
  && rm -f /tmp/deno.zip \
  && rm -rf /var/lib/apt/lists/* \
  && echo "[build] apt-get deps (runtime stage) done"

RUN echo "[build] create rocketchat user start" \
  && groupadd -g 1001 rocketchat \
  && useradd -m -u 1001 -g 1001 -s /bin/bash rocketchat \
  && mkdir -p /app/uploads \
  && chown -R rocketchat:rocketchat /app /app/uploads /tmp \
  && echo "[build] create rocketchat user done"

COPY --from=build --chown=1001:1001 /app/bundle /app/bundle

USER rocketchat

RUN echo "[build] npm install --omit=dev start" \
  && cd programs/server && npm install --omit=dev \
  && echo "[build] npm install --omit=dev done"

RUN echo "[build] link abac for meteor packages start" \
  && if [ -d /app/bundle/programs/server/npm/node_modules/meteor ]; then \
    for d in /app/bundle/programs/server/npm/node_modules/meteor/*/node_modules; do \
      [ -d "$d" ] || continue; \
      mkdir -p "$d/@rocket.chat"; \
      ln -sf /app/bundle/programs/server/npm/node_modules/@rocket.chat/abac "$d/@rocket.chat/abac"; \
    done; \
  fi \
  && echo "[build] link abac for meteor packages done"

RUN echo "[build] patch apps-engine deno flags start" \
  && sed -i "s/--unstable-detect-cjs/--cached-only/" /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/server/runtime/deno/AppsEngineDenoRuntime.js \
  && sed -i "s/--unstable-detect-cjs/--cached-only/" /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/src/server/runtime/deno/AppsEngineDenoRuntime.ts \
  && sed -i "s/--cached-only/--cached-only','--no-lock/" /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/server/runtime/deno/AppsEngineDenoRuntime.js \
  && sed -i "s/--cached-only/--cached-only','--no-lock/" /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/src/server/runtime/deno/AppsEngineDenoRuntime.ts \
  && rm -f /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/deno-runtime/deno.lock \
  && echo "[build] patch apps-engine deno flags done"

RUN echo "[build] deno cache start" \
  && deno cache --no-lock --config /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/deno-runtime/deno.jsonc /app/bundle/programs/server/npm/node_modules/@rocket.chat/apps-engine/deno-runtime/main.ts \
  && echo "[build] deno cache done"




CMD ["node","main.js"]