soteria/Dockerfile.runtime

# Jenkins compiles on its scratch PVC; image assembly needs no toolchain layers.
FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab
COPY --chown=65532:65532 soteria /soteria
USER 65532:65532
EXPOSE 8080
ENTRYPOINT ["/soteria"]
ci: compile on scratch before assembling the runtime image 2026-10-04 06:25:27 -05:00			`# Jenkins compiles on its scratch PVC; image assembly needs no toolchain layers.`
			`FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab`
ci: scope credential umask and preserve nonroot execution 2026-10-04 06:42:38 -05:00			`COPY --chown=65532:65532 soteria /soteria`
ci: compile on scratch before assembling the runtime image 2026-10-04 06:25:27 -05:00			`USER 65532:65532`
			`EXPOSE 8080`
			`ENTRYPOINT ["/soteria"]`