Dockerfile

# Part 1: a builder image with the dependencies to actually build the
# project. Gigabytes on disk.
FROM rust:slim-bookworm AS builder

WORKDIR /

RUN apt update
RUN apt-get install -y \
    # ayb requirements
    libssl-dev \
    # nsjail requirements
    autoconf \
    bison \
    flex \
    gcc \
    g++ \
    git \
    libprotobuf-dev \
    libnl-route-3-dev \
    libtool \
    make \
    pkg-config \
    protobuf-compiler

RUN git clone https://github.com/google/nsjail.git nsjail-checkout && cd nsjail-checkout && make && mv nsjail .. && cd .. && rm -rf nsjail-checkout

COPY . /ayb

RUN cd ayb && cargo build --release

# Part 2: the image with the binaries built by the builder and no
# unnecessary dependencies or build artifacts. Low hundreds of
# megabytes on disk.
FROM debian:bookworm-slim

RUN apt update
RUN apt-get install -y libssl-dev

COPY --from=builder /ayb/target/release/ayb /bin
COPY --from=builder /ayb/target/release/ayb_isolated_runner /bin
COPY --from=builder /nsjail /bin

EXPOSE 5433

CMD ["/bin/ayb", "server"]