# syntax=docker/dockerfile:1

ARG GO_VERSION=1.21
ARG GOLANGCI_LINT_VERSION=v1.52

FROM --platform=$BUILDPLATFORM golang:${GO_VERSION}-alpine AS base

WORKDIR /go/src

COPY go.mod go.sum ./
RUN --mount=type=cache,target=/go/pkg/mod \
    go mod download -x

FROM base as build-client
ARG TARGETOS
ARG TARGETARCH
RUN --mount=type=cache,target=/go/pkg/mod \
    --mount=type=bind,target=. \ #掛載代碼
    GOOS=$TARGETOS GOARCH=$TARGETARCH go build -v -o /bin/client ./cmd/client

FROM base as build-server
ARG TARGETOS
ARG TARGETARCH
ARG APP_VERSION="v0.0.0+unknown"
RUN --mount=type=cache,target=/go/pkg/mod \
    --mount=type=bind,target=. \ #掛載代碼
    GOOS=$TARGETOS GOARCH=$TARGETARCH go build -v -ldflags "-X main.version=$APP_VERSION" -o /bin/server ./cmd/server

FROM scratch AS client
COPY --from=build-client /bin/client /bin/
ENTRYPOINT [ "/bin/client" ]

FROM scratch AS server
COPY --from=build-server /bin/server /bin/
ENTRYPOINT [ "/bin/server" ]

FROM scratch AS binaries
COPY --from=build-client /bin/client /
COPY --from=build-server /bin/server /

FROM golangci/golangci-lint:${GOLANGCI_LINT_VERSION} as lint
WORKDIR /test
RUN --mount=type=bind,target=. \
    golangci-lint run

導(dǎo)出構(gòu)建后的文件

docker build 
--output=bin  \ #指定導(dǎo)出目錄
--target=binaries \ #指定構(gòu)建階段
.

多平臺(tái)構(gòu)建

docker buildx create --driver=docker-container --name=container

docker buildx build \
--target=binaries \ #指定構(gòu)建階段
--output=bin \ #指定導(dǎo)出目錄
--builder=container \
--platform=darwin/arm64,windows/amd64,linux/amd64 \
.

Dockerfile中的變量

1. TARGETOS 和 TARGETARCH

--platform=linux/amd64 會(huì)被解析為：TARGETOS=linux TARGETARCH=amd64

2. BUILDPLATFORM

值為當(dāng)前構(gòu)建鏡像的平臺(tái)，例如我當(dāng)前在mac m1平臺(tái)上編譯鏡像，則 BUILDPLATFORM=darwin/arm64

構(gòu)建過(guò)程中掛載的坑

RUN --mount=type=cache,target=/go/pkg/mod \
    --mount=type=bind,target=. \
    GOOS=$TARGETOS GOARCH=$TARGETARCH go build -v -o /bin/client ./cmd/client

當(dāng)使用 --mount=type=bind,target=. 時(shí) go build -v -o /bin/client /bin/client 必須用絕對(duì)路徑且可寫，不能是 ./bin/client
否則會(huì)出現(xiàn) mkdir ./bin/: read-only file system

推送到dockerhub遇到的坑

1. 有多個(gè)dockerhub賬號(hào)
2. 來(lái)回切換過(guò)
3. docker buildx build 加上 --push后，會(huì)在歷史登陸過(guò)的所有賬號(hào)驗(yàn)證token，導(dǎo)致一直出現(xiàn) insufficient_scope: authorization failed
4. 解決辦法
   我們?cè)谑褂胋uildx前新建了一個(gè)builder： docker buildx create --driver=docker-container --name=container
   辦法就是移除后重建：docker buildx rm container

https://docs.docker.com/build/guide/multi-platform/