搜索结果: "build"

tags: [docker, image, container, build, deployment, security]

FROM golang:1.22-alpine AS builder

WORKDIR /build

RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /app/server .

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

docker builder prune -a

**原理：** `latest` 只是一个普通 tag，不自动指向最新版本。它的指向完全取决于最后一次 `docker build -t` 或 `docker tag` 操作。

FROM golang:1.21 AS builder

RUN go build -o app .

COPY --from=builder /root/.npm /root/.npm # 泄露了 npm 凭证

tags: [docker, image, build, golang, container]

RUN go build -ldflags="-s -w" -o /app/server ./cmd/server

COPY --from=builder /app/server /server

如果应用需要访问 HTTPS 外部服务，必须从 builder 阶段复制 CA 证书：

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

tags: [kubernetes, deployment, build, production]

VERSION = "${env.BUILD_NUMBER}"

stage('Build & Test') {

stage('Docker Build & Push') {

docker build -t ${REGISTRY}/${IMAGE_NAME}:${VERSION} .

- 修复断裂链接（docker-multi-stage-build → go-static-compilation-docker）

- Merged into: concepts/docker-image-optimization（从 80 行 → 280+ 行，新增 Dockerfile 指令级缓存策略、BuildKit 高级特性、多语言多阶段示例、安全加固、CI/CD 集成、排障监控、指令速查表）

- 合并原因：同一主题"镜像优化"，新文补充指令级深度（缓存顺序、shell vs exec、COPY vs ADD、BuildKit cache/secret/ssh mount）及 CI/CD 实践，属"更深入的同类型内容"

- build: 构建与 CI

tags: [kubernetes, deployment, architecture, build, networking, storage, monitoring, configmap, security, certificate, docker, container]

| 59 | 自定义控制器？ | 控制循环（观察→比较→行动），用 client-go/operator-sdk/kubebuilder 开发 |

- [[docker-image-optimization]] — Docker 镜像优化完全指南：瘦身、构建加速与安全加固（多阶段/BuildKit/CI集成）