Dockerfile

# Add another layer just to fetch Cargo on the build platform.
# This is to work around this issue with QEMU on ARMv7: https://github.com/docker/buildx/issues/395
# More details: https://gitlab.com/qemu-project/qemu/-/issues/263 and https://github.com/rust-lang/cargo/issues/8719
FROM --platform=$BUILDPLATFORM rust:1.67.0-slim-bullseye as sources

WORKDIR /usr/src/shadow-tls
RUN cargo init
COPY ./Cargo.toml ./Cargo.toml
COPY ./Cargo.lock ./Cargo.lock
RUN mkdir -p ./.cargo \
  && cargo vendor > ./.cargo/config

FROM rust:1.67.0-slim-bullseye as builder

WORKDIR /usr/src/shadow-tls

RUN apt-get update \
 && apt-get install -y --no-install-recommends \
   build-essential \
   libssl-dev;


COPY ./ ./
COPY --from=sources /usr/src/shadow-tls/.cargo ./.cargo
COPY --from=sources /usr/src/shadow-tls/vendor ./vendor

COPY . .
RUN CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse RUSTFLAGS="" cargo build --bin shadow-tls --release

FROM debian:stable-slim

ENV MODE=""
ENV LISTEN=""
ENV SERVER=""
ENV TLS=""
ENV THREADS=""
ENV PASSWORD=""
ENV ALPN=""
ENV DISABLE_NODELAY=""
ENV V3=""
ENV STRICT=""

COPY ./entrypoint.sh /
RUN chmod +x /entrypoint.sh && apt-get update && apt-get install -y --no-install-recommends ca-certificates
COPY --from=builder /usr/src/shadow-tls/target/release/shadow-tls /usr/local/bin/shadow-tls
ENTRYPOINT ["/entrypoint.sh"]