mirror of
https://github.com/LowderPlay/cheburcheck.git
synced 2026-09-25 15:58:11 +03:00
LowderPlay
3f74894786
* feat: ip probe traceroute * feat: block bogon and rate limit * fix: block badge * fix: control sampling * docs: update probing info * feat: disable traceroute * feat: dns spoofing * docs: dns spoofing * chore: bump version * fix: default rate limit
33 lines
873 B
Docker
33 lines
873 B
Docker
# syntax=docker/dockerfile:1.10
|
|
|
|
FROM docker.io/rust:1-slim-bookworm AS build
|
|
|
|
WORKDIR /build
|
|
|
|
COPY . .
|
|
|
|
RUN --mount=type=cache,id=probe-target,target=/build/target \
|
|
--mount=type=cache,id=cargo-registry,target=/usr/local/cargo/registry \
|
|
--mount=type=cache,id=cargo-git,target=/usr/local/cargo/git \
|
|
set -eux; \
|
|
RUSTFLAGS="-C strip=symbols" cargo build --locked --release --package probe --bin cheburprobe; \
|
|
cp target/release/cheburprobe ./probe-bin
|
|
|
|
FROM docker.io/debian:bookworm-slim
|
|
|
|
RUN apt-get update && \
|
|
apt-get install --yes --no-install-recommends libcap2-bin && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
groupadd --system app && \
|
|
useradd --system --gid app --home-dir /app --shell /usr/sbin/nologin app
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=build /build/probe-bin ./probe
|
|
|
|
RUN setcap cap_net_raw=ep ./probe
|
|
|
|
USER app
|
|
|
|
ENTRYPOINT ["./probe"]
|