Dockerfile

# syntax=docker/dockerfile:1

FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.9.0 AS xx

FROM --platform=$BUILDPLATFORM golang:1.26.2-trixie AS builder

COPY --from=xx / /

WORKDIR /usr/src/app

COPY go.mod go.sum *.go ./
COPY cmd ./cmd
COPY internal ./internal

ARG PROJECT_VERSION
RUN test -n "${PROJECT_VERSION}"

ARG TARGETPLATFORM
ENV CGO_ENABLED=0
RUN xx-go build -ldflags "-X main.projectVersion=${PROJECT_VERSION}" -o bin/ -v ./... && \
    xx-verify bin/*

# hadolint ignore=DL3006
FROM gcr.io/distroless/static-debian13

COPY --from=builder /usr/src/app/bin/* /usr/local/bin/

HEALTHCHECK CMD ["/usr/local/bin/healthcheck"]

EXPOSE 2375

USER nonroot
CMD ["/usr/local/bin/docker-socket-proxy", "-api-listen", "0.0.0.0:2375"]