build: use osusergo netgo to have a truly static build in docker

gcr.io/distroless/static-debian11 doesn't have glibc so we make sure to never need it at runtime
alterway · Aug 8, 2023 · 0e633bd · 0e633bd
1 parent 6a775ce
commit 0e633bd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -2,7 +2,7 @@
 FROM golang:1.20 as builder
 WORKDIR         /go/src/sshportal
 COPY            . ./
-RUN             go build -ldflags="-X main.GitSha=$(git rev-parse --short HEAD) -X main.GitTag=$(git describe --tags --always) -extldflags '-static' -w -s" -tags sqlite_omit_load_extension -v -o /go/bin/sshportal
+RUN             go build -ldflags="-X main.GitSha=$(git rev-parse --short HEAD) -X main.GitTag=$(git describe --tags --always) -extldflags '-static' -w -s" -tags osusergo,netgo,sqlite_omit_load_extension -v -o /go/bin/sshportal
 
 # minimal runtime
 # https://github.com/GoogleContainerTools/distroless/blob/main/base/README.md