mirror of
https://github.com/juanfont/headscale.git
synced 2026-05-23 18:48:42 +09:00
78570c754f
Bump golang to 1.26.3, alpine to 3.23, rust to 1.95 across the integration, derper, tailscale-HEAD, and tailscale-rs Dockerfiles.
27 lines
954 B
Docker
27 lines
954 B
Docker
FROM rust:1.95-trixie AS builder
|
|
|
|
ARG TAILSCALE_RS_REPO=https://github.com/tailscale/tailscale-rs.git
|
|
ARG TAILSCALE_RS_REF=main
|
|
|
|
WORKDIR /app
|
|
RUN git clone --depth 1 --branch "$TAILSCALE_RS_REF" "$TAILSCALE_RS_REPO" .
|
|
|
|
# Re-export ts_control's insecure-keyfetch feature through the tailscale
|
|
# crate so the axum example can fetch the headscale control key over
|
|
# plain HTTP. The integration harness serves the control plane without
|
|
# TLS, and upstream only allows plain-HTTP key fetches when this Cargo
|
|
# feature is compiled in.
|
|
RUN sed -i '/^axum = \["dep:axum"\]/a insecure-keyfetch = ["ts_control/insecure-keyfetch"]' Cargo.toml
|
|
|
|
RUN cargo build --release --features axum,insecure-keyfetch --example axum
|
|
|
|
FROM debian:trixie-slim
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
iproute2 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=builder /app/target/release/examples/axum /usr/local/bin/axum
|