Use separate dockerfile for build and release

Dockerfile

@@ -1,14 +1,7 @@
-FROM golang:1.22.5-bookworm as builder
-
-WORKDIR /sftp-exporter
-COPY ./go.mod ./
-COPY ./go.sum ./
-RUN go mod download -x
-COPY ./ ./
-RUN GOOS=linux GOARCH=$(dpkg --print-architecture) make build
-
 FROM debian:bookworm
 
-WORKDIR /sftp-exporter
-COPY --from=builder /sftp-exporter/out/sftp-exporter .
+COPY ./sftp-exporter /usr/local/bin/
+EXPOSE 8080
+RUN useradd -ms /bin/bash sftp-exporter
+USER sftp-exporter
 ENTRYPOINT ["./sftp-exporter"]

build.Dockerfile

@@ -0,0 +1,16 @@
+FROM golang:1.22.5-bookworm as builder
+
+WORKDIR /sftp-exporter
+COPY ./go.mod ./
+COPY ./go.sum ./
+RUN go mod download -x
+COPY ./ ./
+RUN GOOS=linux GOARCH=$(dpkg --print-architecture) make build
+
+FROM debian:bookworm
+
+COPY --from=builder /sftp-exporter/out/sftp-exporter /usr/local/bin/
+EXPOSE 8080
+RUN useradd -ms /bin/bash sftp-exporter
+USER sftp-exporter
+ENTRYPOINT ["sftp-exporter"]

playground/docker-compose.yml

@@ -34,7 +34,7 @@ services:
     hostname: sftp-exporter
     build:
       context: ../
-      dockerfile: ./Dockerfile
+      dockerfile: ./build.Dockerfile
     ports:
       - "8081:8080"
     environment: