Dockerfile

# set up the image to build the explorer app
FROM --platform=$BUILDPLATFORM node:alpine AS node-builder
WORKDIR /src

# install dependencies first
COPY ./runtime/explorer/content/package*.json ./
RUN npm ci

# copy and build the rest of the application
COPY ./runtime/explorer/content .
RUN npm run build

# set up the image to build the runtime
FROM --platform=$BUILDPLATFORM golang:alpine AS builder
WORKDIR /src

# copy lib dependencies
COPY ./lib ./lib

# Copy and modify go.work file
COPY ./go.work ./
RUN sed -i '/^[[:space:]]*\.\/sdk\//d' ./go.work && \
    sed -i '/^[[:space:]]*\.\/.*\/testdata/d' ./go.work

# switch to the runtime directory
WORKDIR /src/runtime

# copy go.mod and go.sum files separately so that the download step
# is only run when the dependencies change
COPY runtime/go.mod runtime/go.sum ./
RUN go mod download

# copy the rest of the runtime source and the compiled explorer app
COPY runtime/ ./
COPY --from=node-builder /src/dist ./explorer/content/dist

# build the runtime binary
ARG TARGETOS TARGETARCH RUNTIME_RELEASE_VERSION
RUN GOOS=$TARGETOS GOARCH=$TARGETARCH go build -o modus_runtime -ldflags "-X github.com/hypermodeinc/modus/runtime/app.version=$RUNTIME_RELEASE_VERSION" .

# build the container image
FROM ubuntu:24.04
LABEL maintainer="Hypermode Inc. <hello@hypermode.com>"

# Create a custom group and user
RUN groupadd -g 1234 modus && \
    useradd -m -u 1234 -g modus modus

# add common tools
RUN apt-get update && apt-get install -y --no-install-recommends \
    curl \
    iputils-ping \
    jq \
    less \
    && rm -rf /var/lib/apt/lists/*

# copy runtime binary from the build phase
COPY --from=builder /src/runtime/modus_runtime /usr/bin/modus_runtime

# copy the runtime source code to the container (for Sentry source context)
# keep only go source files and remove tests
COPY ./runtime /src/runtime/
COPY ./lib /src/lib/
RUN find /src -type f ! -name '*.go' -delete && \
    find /src -type f -name '*_test.go' -delete && \
    find /src -type d -name '*test*' -exec rm -rf {} +

# update certificates and time zones every build
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
    ca-certificates \
    tzdata tzdata-legacy \
    && rm -rf /var/lib/apt/lists/*

# Switch to the custom user and set the working directory
USER modus
WORKDIR /home/modus

# set the default entrypoint and options
ENTRYPOINT ["modus_runtime", "--jsonlogs"]

# define the health check for the container
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 CMD curl -f http://localhost:8686/health | jq -e '.status == "ok"' > /dev/null || exit 1