27 lines
907 B
Docker
27 lines
907 B
Docker
FROM rust:1.94-bookworm AS builder
|
|
|
|
WORKDIR /app
|
|
COPY . .
|
|
# compliance-agent (a workspace member) depends on the private tramiton-core git
|
|
# repo, so the workspace resolve needs it even to build the mcp binary.
|
|
# Authenticate the fetch with a PAT passed as a BuildKit secret.
|
|
RUN --mount=type=secret,id=tramiton_token \
|
|
if [ -s /run/secrets/tramiton_token ]; then \
|
|
git config --global \
|
|
url."https://sharang:$(cat /run/secrets/tramiton_token)@git.breakpilot.com/".insteadOf \
|
|
"ssh://git@git.breakpilot.com:22222/"; \
|
|
fi && \
|
|
CARGO_NET_GIT_FETCH_WITH_CLI=true cargo build --release -p compliance-mcp
|
|
|
|
FROM debian:bookworm-slim
|
|
RUN apt-get update && apt-get install -y ca-certificates libssl3 && rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=builder /app/target/release/compliance-mcp /usr/local/bin/compliance-mcp
|
|
|
|
EXPOSE 8090
|
|
|
|
ENV MCP_PORT=8090
|
|
|
|
ENTRYPOINT ["compliance-mcp"]
|
|
|