Sylvain Duchesne
8d0670a637
Built and run for the first time (until now the dockerized path had only been checked with `docker compose config`): the image built, and the container exited at start with `Cannot find module '../build/Release/sharp-linux-x64.node'`. pnpm 10 skips dependency build scripts unless they are approved, so sharp, bcrypt and sodium-native were installed without their binaries. A local node_modules can carry binaries from an earlier manual build, which is how it stayed invisible. `pnpm.onlyBuiltDependencies` now approves the three. Approved, sharp's installer then downloaded its prebuilt libvips and binary from GitHub, and that download timed out on every in-build attempt (3 of 3), failing the build, while the same download from a plain container was instantaneous. With libvips-dev installed, sharp detects a system libvips and compiles itself instead; npm_config_nodedir points node-gyp at the headers the image already ships. Verified with GitHub and nodejs.org blackholed: the build passes, sharp loads against libvips 8.14.1, bcrypt falls back to compiling. Cost: a larger image; a multi-stage build keeping only libvips42 at runtime would drop several hundred MB.
35 lines
1.1 KiB
Docker
35 lines
1.1 KiB
Docker
FROM node:22-slim
|
|
|
|
# Install pnpm and build tools required for native modules (sharp, bcrypt).
|
|
# libvips-dev: with a system libvips present, sharp compiles itself against it instead of
|
|
# downloading its prebuilt binaries from GitHub, a download that timed out on every in-build
|
|
# attempt (2026-10-19) and failed the build.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
python3 \
|
|
make \
|
|
g++ \
|
|
pkg-config \
|
|
libvips-dev \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& corepack enable && corepack prepare pnpm@10.26.0 --activate
|
|
|
|
# node-gyp compiles against the headers this image already ships rather than downloading them.
|
|
ENV npm_config_nodedir=/usr/local
|
|
|
|
WORKDIR /app
|
|
|
|
# Install dependencies first to leverage Docker layer caching. The native modules' build
|
|
# scripts only run because package.json approves them (pnpm.onlyBuiltDependencies).
|
|
COPY package.json pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile --prod
|
|
|
|
# Copy application code.
|
|
COPY config ./config
|
|
COPY moleculer.config.js ./
|
|
COPY services ./services
|
|
|
|
EXPOSE 3003
|
|
|
|
CMD ["pnpm", "start"]
|