Lock down filesystem access for supybot

[chef.git] / Dockerfile

diff --git a/Dockerfile b/Dockerfile
index 1dca54301ca812919c5eb3061a9250efb5a0694b..fa0ad5960af0f072b55c489cdb7713e6a8629096 100644 (file)
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,14 +1,24 @@
-FROM ruby:2.4
+# Basic Dockerfile to run cookstyle linting
+# run: docker build -t chef-test .
+FROM ruby:3.1-alpine as build
 
+# Add Gem build requirements
+RUN apk add --no-cache build-base
+
+# Create app directory
 WORKDIR /app
 
-RUN apt-get update \
-       && apt-get install -y --no-install-recommends libssl1.0-dev
+# Add Gemfile and Gemfile.lock
+ADD Gemfile* ./
 
-ADD Gemfile* /app/
-RUN gem install bundler && bundle config build.nokogiri --use-system-libraries && bundle install --jobs 4 --retry 5
+# Install Gems
+RUN gem install bundler \
+    && bundle config build.nokogiri --use-system-libraries \
+    && bundle config --global jobs $(nproc) \
+    && bundle install
 
-ADD . /app/
+# Add repo
+ADD . .
 
-RUN bundle exec rubocop -f fuubar
-RUN bundle exec foodcritic -f any cookbooks
+# Run linting
+RUN bundle exec cookstyle -f fuubar