Distroless Docker image with Caddy

Author: rubensa

.github/workflows/main.yml

@@ -0,0 +1,21 @@
+name: CI to Docker Hub
+
+# Controls when the workflow will run
+on:
+  # Triggers the workflow on push request events but only for tags vX.X.X
+  push:
+    tags:
+      - "v*.*.*"
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow call reusable workflow docker-build
+  build:
+    uses: nextail/docker-ubuntu-tini/.github/workflows/docker-build.yml@master
+    with:
+      DOCKER_REPOSITORY_NAME: nextail
+      DOCKER_IMAGE_NAME: distroless-caddy
+      DOCKER_IMAGE_TAG: latest
+    secrets: inherit

Dockerfile

@@ -0,0 +1,29 @@
+# syntax=docker/dockerfile:1.4
+# https://github.com/caddyserver/caddy/releases
+# https://github.com/caddyserver/caddy-docker/blob/00dd7e57fca3ae2e6fdf9cc08526458fd501db79/2.6/alpine/Dockerfile
+ARG CADDY_VERSION=2.6.4
+
+FROM caddy:${CADDY_VERSION}-alpine AS caddy_base
+
+FROM gcr.io/distroless/static-debian12:nonroot as debian_nonroot
+LABEL author="Ruben Suarez <[email protected]>"
+
+ENV CADDY_VERSION=v${CADDY_VERSION}
+
+# See https://caddyserver.com/docs/conventions#file-locations for details
+ENV XDG_CONFIG_HOME=/config
+ENV XDG_DATA_HOME=/data
+
+EXPOSE 80
+EXPOSE 443
+EXPOSE 443/udp
+EXPOSE 2019
+
+COPY --from=caddy_base --chown=nonroot:nonroot /usr/bin/caddy /usr/bin/caddy
+COPY --from=caddy_base --chown=nonroot:nonroot /config /config
+COPY --from=caddy_base --chown=nonroot:nonroot /data /data
+
+COPY --from=caddy_base --chown=nonroot:nonroot /etc/caddy/Caddyfile /etc/caddy/Caddyfile
+COPY --from=caddy_base --chown=nonroot:nonroot  /usr/share/caddy/ /usr/share/caddy/
+
+CMD ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]

README.md

@@ -0,0 +1,93 @@
+# Distroless Docker image with Caddy
+
+This is a [Distroless](https://github.com/GoogleContainerTools/distroless) Docker image with [Caddy](https://github.com/caddyserver/caddy) from the [official Docker image](https://github.com/caddyserver/caddy-docker).
+
+## Building
+
+You can build the image like this:
+
+```
+#!/usr/bin/env bash
+
+DOCKER_REPOSITORY_NAME="nextail"
+DOCKER_IMAGE_NAME="distroless-caddy"
+DOCKER_IMAGE_TAG="latest"
+
+# see: https://github.com/docker/buildx/issues/495#issuecomment-761562905
+#docker buildx build --platform=linux/amd64,linux/arm64 --no-cache --progress=plain --pull \
+docker buildx build --platform=linux/amd64,linux/arm64 --no-cache \
+  -t "${DOCKER_REPOSITORY_NAME}/${DOCKER_IMAGE_NAME}:${DOCKER_IMAGE_TAG}" \
+  --label "maintainer=Ruben Suarez <[email protected]>" \
+  .
+
+docker buildx build --load \
+  -t "${DOCKER_REPOSITORY_NAME}/${DOCKER_IMAGE_NAME}:${DOCKER_IMAGE_TAG}" \
+  .
+```
+
+## Running
+
+You can run the container like this (change --rm with -d if you don't want the container to be removed on stop):
+
+```
+#!/usr/bin/env bash
+
+DOCKER_REPOSITORY_NAME="nextail"
+DOCKER_IMAGE_NAME="distroless-caddy"
+DOCKER_IMAGE_TAG="latest"
+
+prepare_docker_timezone() {
+  # https://www.waysquare.com/how-to-change-docker-timezone/
+  ENV_VARS+=" --env=TZ=$(cat /etc/timezone)"
+}
+
+prepare_docker_timezone
+
+docker run --rm -it \
+  --name "${DOCKER_IMAGE_NAME}" \
+  ${ENV_VARS} \
+  "${DOCKER_REPOSITORY_NAME}/${DOCKER_IMAGE_NAME}:${DOCKER_IMAGE_TAG}" "$@"
+```
+
+## Stop
+
+You can stop the running container like this:
+
+```
+#!/usr/bin/env bash
+
+DOCKER_IMAGE_NAME="distroless-caddy"
+
+docker stop  \
+  "${DOCKER_IMAGE_NAME}"
+```
+
+## Start
+
+If you run the container without --rm you can start it again like this:
+
+```
+#!/usr/bin/env bash
+
+DOCKER_IMAGE_NAME="distroless-caddy"
+
+docker start \
+  "${DOCKER_IMAGE_NAME}"
+```
+
+## Remove
+
+If you run the container without --rm you can remove once stopped like this:
+
+```
+#!/usr/bin/env bash
+
+DOCKER_IMAGE_NAME="distroless-caddy"
+
+docker rm \
+  "${DOCKER_IMAGE_NAME}"
+```
+
+## For more information
+
+See official [Caddy Docker image documentation](https://hub.docker.com/_/caddy).

build.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+DOCKER_REPOSITORY_NAME="nextail"
+DOCKER_IMAGE_NAME="distroless-caddy"
+DOCKER_IMAGE_TAG="latest"
+
+# see: https://github.com/docker/buildx/issues/495#issuecomment-761562905
+#docker buildx build --platform=linux/amd64,linux/arm64 --no-cache --progress=plain --pull \
+docker buildx build --platform=linux/amd64,linux/arm64 --no-cache \
+  -t "${DOCKER_REPOSITORY_NAME}/${DOCKER_IMAGE_NAME}:${DOCKER_IMAGE_TAG}" \
+  --label "maintainer=Ruben Suarez <[email protected]>" \
+  .
+
+docker buildx build --load \
+  -t "${DOCKER_REPOSITORY_NAME}/${DOCKER_IMAGE_NAME}:${DOCKER_IMAGE_TAG}" \
+  .

connect.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+DOCKER_IMAGE_NAME="distroless-caddy"
+
+docker exec -it \
+  "${DOCKER_IMAGE_NAME}" \
+  bash -l

run.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+DOCKER_REPOSITORY_NAME="nextail"
+DOCKER_IMAGE_NAME="distroless-caddy"
+DOCKER_IMAGE_TAG="latest"
+
+prepare_docker_timezone() {
+  # https://www.waysquare.com/how-to-change-docker-timezone/
+  ENV_VARS+=" --env=TZ=$(cat /etc/timezone)"
+}
+
+prepare_docker_timezone
+
+docker run --rm -it \
+  --name "${DOCKER_IMAGE_NAME}" \
+  ${ENV_VARS} \
+  "${DOCKER_REPOSITORY_NAME}/${DOCKER_IMAGE_NAME}:${DOCKER_IMAGE_TAG}" "$@"

start.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+DOCKER_IMAGE_NAME="distroless-caddy"
+
+docker start \
+  "${DOCKER_IMAGE_NAME}"

stop.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+DOCKER_IMAGE_NAME="distroless-caddy"
+
+docker stop  \
+  "${DOCKER_IMAGE_NAME}"