Optimize Docker build with improved SSL handling and timeouts

Co-authored-by: jongalloway <[email protected]>

Author: Copilot

deployment/docker/Dockerfile

@@ -2,49 +2,60 @@
 # Based on .NET 9 runtime and optimized for production deployment
 
 # Multi-stage Dockerfile for NLWebNet Demo Application
-# Optimized to work around SSL certificate issues in containerized environments
+# Optimized for production deployment with SSL workarounds
 
-# Build stage  
+# Build stage
 FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
 WORKDIR /src
 
-# Install ca-certificates
+# Install necessary certificates and tools
 RUN apt-get update && \
-    apt-get install -y ca-certificates && \
+    apt-get install -y ca-certificates curl && \
     update-ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
-# Set environment variables for .NET
+# Set environment variables for .NET in containerized environments
 ENV DOTNET_SYSTEM_NET_HTTP_USESOCKETSHTTPHANDLER=0
 ENV NUGET_XMLDOC_MODE=skip
+ENV DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1
+ENV DOTNET_EnableWriteXorExecute=0
+ENV DOTNET_SKIP_FIRST_TIME_EXPERIENCE=true
+ENV DOTNET_CLI_TELEMETRY_OPTOUT=true
 
-# Copy project files first for dependency resolution
+# Copy project files first
 COPY ["NLWebNet.sln", "./"]
 COPY ["src/NLWebNet/NLWebNet.csproj", "src/NLWebNet/"]
 COPY ["samples/Demo/NLWebNet.Demo.csproj", "samples/Demo/"]
 COPY ["samples/AspireHost/NLWebNet.AspireHost.csproj", "samples/AspireHost/"]
 COPY ["tests/NLWebNet.Tests/NLWebNet.Tests.csproj", "tests/NLWebNet.Tests/"]
 COPY ["NuGet.Config", "./"]
 
-# Try restore with fallback - if it fails, continue anyway
-RUN echo "Attempting package restore..." && \
-    export DOTNET_SYSTEM_NET_HTTP_USESOCKETSHTTPHANDLER=0 && \
-    export DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1 && \
-    export COMPlus_DisableEncryptedStateCache=1 && \
-    (dotnet restore "samples/Demo/NLWebNet.Demo.csproj" --verbosity minimal || \
-     (echo "Restore failed with SSL errors, attempting workaround..." && \
-      dotnet nuget locals all --clear && \
-      dotnet restore "samples/Demo/NLWebNet.Demo.csproj" --verbosity minimal --ignore-failed-sources) || \
-     echo "All restore attempts failed, continuing with no-restore build...")
-
-# Copy source code
+# Attempt package restore with multiple fallback strategies
+# This addresses the SSL certificate validation issues common in Docker environments
+RUN echo "=== Attempting NuGet package restore ===" && \
+    echo "Strategy 1: Standard restore" && \
+    (timeout 60 dotnet restore "samples/Demo/NLWebNet.Demo.csproj" --verbosity minimal) || \
+    (echo "Strategy 2: Restore with --disable-parallel" && \
+     timeout 60 dotnet restore "samples/Demo/NLWebNet.Demo.csproj" --verbosity minimal --disable-parallel) || \
+    (echo "Strategy 3: Clear cache and retry" && \
+     dotnet nuget locals all --clear && \
+     timeout 60 dotnet restore "samples/Demo/NLWebNet.Demo.csproj" --verbosity minimal --ignore-failed-sources) || \
+    echo "All restore strategies failed due to SSL issues - will attempt build anyway"
+
+# Copy all source code
 COPY . .
 
-# Build and publish with no-restore fallback 
+# Build and publish with fallback strategies
+# If restore failed, the build will automatically restore what it can
 RUN cd samples/Demo && \
-    echo "Building NLWebNet Demo application..." && \
-    (dotnet build "NLWebNet.Demo.csproj" -c Release --no-restore --verbosity minimal || \
-     dotnet build "NLWebNet.Demo.csproj" -c Release --verbosity minimal) && \
+    echo "=== Building NLWebNet Demo Application ===" && \
+    (echo "Attempting build with --no-restore..." && \
+     dotnet build "NLWebNet.Demo.csproj" -c Release --no-restore --verbosity minimal) || \
+    (echo "Build without restore failed, attempting with restore and shorter timeout..." && \
+     timeout 90 dotnet build "NLWebNet.Demo.csproj" -c Release --verbosity minimal) || \
+    (echo "Standard build failed, trying with ignore-failed-sources..." && \
+     timeout 90 dotnet build "NLWebNet.Demo.csproj" -c Release --verbosity minimal -p:RestoreIgnoreFailedSources=true) && \
+    echo "=== Publishing application ===" && \
     dotnet publish "NLWebNet.Demo.csproj" -c Release --no-build -o /app/publish /p:UseAppHost=false
 
 # Runtime stage