Commit 40011e2 added manifest.toml to pin transitive deps, but the
Dockerfile only copies gleam.toml — so every Docker build still
re-resolves from scratch and can pick up incompatible versions within
the allowed ranges, defeating the lockfile's purpose.
14 lines
358 B
Docker
14 lines
358 B
Docker
FROM ghcr.io/gleam-lang/gleam:v1.16.0-erlang-alpine AS builder
|
|
WORKDIR /build
|
|
COPY gleam.toml manifest.toml ./
|
|
RUN gleam deps download
|
|
COPY src ./src
|
|
RUN gleam export erlang-shipment
|
|
|
|
FROM erlang:27-alpine
|
|
RUN apk add --no-cache openssl-dev
|
|
WORKDIR /app
|
|
COPY --from=builder /build/build/erlang-shipment .
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["/app/entrypoint.sh", "run"]
|