Share
Embed
Transcript
20 slides
-
©Showcase Gig 自己紹介 • 照井寛也 • 株式会社Showcase Gig ◦ エンジニアリングオフィス
• Sendai.go オーガナイザー • X : @10_ru_1 -
©Showcase Gig scratchを使ったmulti stage build FROM golang:1.23.4 AS build-env
ENV WORKDIR_PATH /go/src/github.com/showcase-gig/go-awesome-project WORKDIR ${WORKDIR_PATH} COPY go.mod . COPY go.sum . ADD . ${WORKDIR_PATH} RUN CGO_ENABLED=0 go build -buildvcs=false -o /bin/go-awesome-project ./cmd/go-awesome-project FROM scratch COPY --from=build-env /bin/go-awesome-project /bin/go-awesome-project EXPOSE 80 ENTRYPOINT [ "/bin/go-awesome-project" ] -
©Showcase Gig • 最小のimageファイル ◦ scratchはゼロベースのimage • Goのバイナリだけで動作 ◦ CGO_ENABLED=0
• セキュリティ向上 ◦ binaryファイルだけが動作 multi stage buildの メリット -
©Showcase Gig scratch上で実行してみる 👀 func main() { l, err :=
time.LoadLocation("Asia/Tokyo") if err != nil { log.Fatal(err) return } birthday := time.Date(1996, 10, 19, 0, 0, 0, 0, l) fmt.Println(birthday) } -
©Showcase Gig • local環境では動いていた。。 ◦ localではalpineベースで動かしてい た ◦ airやdlvなどを入れるため •
でもdeployすると動かない ◦ scratch imageでdeploy用のdocker 用意してた しかもlocalでは 動いちゃって 気づかないことも -
©Showcase Gig 1. ZONEINFOの環境変数を見にく a. なし 2. platfromZoneSourcesを見にいく a. 🤔
zoneinfo.go https://cs.opensource.google/go/go/+/refs/tags/go1. 23.4:src/time/zoneinfo.go;l=666-699 -
©Showcase Gig //go:buildで区別している • zoneinfo_unix.go ◦ //go:build unix && !ios
&& !android • zoneinfo_goroot.go ◦ //go:build !ios && !android • zoneinfo_ios.go ◦ //go:build ios …… ちなみにzoneinfo_***.goは他にもある -
©Showcase Gig (話を戻して)scratchを使ったmulti stage build FROM golang:1.23.4 AS build-env
ENV WORKDIR_PATH /go/src/github.com/showcase-gig/go-awesome-project WORKDIR ${WORKDIR_PATH} COPY go.mod . COPY go.sum . ADD . ${WORKDIR_PATH} RUN CGO_ENABLED=0 go build -buildvcs=false -o /bin/go-awesome-project ./cmd/go-awesome-project FROM scratch COPY --from=build-env /bin/go-awesome-project /bin/go-awesome-project EXPOSE 80 ENTRYPOINT [ "/bin/go-awesome-project" ] -
©Showcase Gig zoneinfoをcopyしてあげる FROM golang:1.23.4 AS build-env ENV WORKDIR_PATH
/go/src/github.com/showcase-gig/go-awesome-project WORKDIR ${WORKDIR_PATH} COPY go.mod . COPY go.sum . ADD . ${WORKDIR_PATH} RUN CGO_ENABLED=0 go build -buildvcs=false -o /bin/go-awesome-project ./cmd/go-awesome-project FROM scratch COPY --from=build-env /bin/go-awesome-project /bin/go-awesome-project COPY --from=builder /usr/share/zoneinfo /usr/share/zoneinfo EXPOSE 80 ENTRYPOINT [ "/bin/go-awesome-project" ] -
©Showcase Gig もしくはalpineを使う FROM golang:1.23 AS build-env ENV WORKDIR_PATH
/go/src/github.com/showcase-gig/go-awesome-project WORKDIR ${WORKDIR_PATH} COPY go.mod . COPY go.sum . ADD . ${WORKDIR_PATH} RUN CGO_ENABLED=0 go build -buildvcs=false -o /bin/go-awesome-project ./cmd/go-awesome-project FROM golang:1.23.4-alpine COPY --from=build-env /bin/go-awesome-project /bin/go-awesome-project EXPOSE 80 ENTRYPOINT [ "/bin/go-awesome-project" ]