Dockerfile

FROM docker.io/paritytech/ci-linux:production as builder
LABEL description="Build stage"

WORKDIR /trappist
COPY . /trappist

RUN apt-get update && apt-get -y install ca-certificates

RUN cargo build --release

# ===== SECOND STAGE ======

FROM docker.io/library/ubuntu:20.04
LABEL description="Trappist Collator"

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY --from=builder /trappist/target/release/trappist-collator /usr/local/bin

RUN useradd -m -u 1000 -U -s /bin/sh -d /trappist trappist && \
    mkdir -p /trappist/.local/share && \
    mkdir /data && \
    chown -R trappist:trappist /data && \
    ln -s /data /trappist/.local/share/trappist && \
    rm -rf /usr/bin /usr/sbin

USER trappist
EXPOSE 30333 9933 9944 9615
VOLUME ["/data"]

ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
ENV SSL_CERT_DIR=/etc/ssl/certs

ENTRYPOINT ["/usr/local/bin/trappist-collator"]