fix/Simplify docker images (#2446)

Closes #2379. Tested with
nspcc-dev/neofs-dev-env#272.

.docker/Dockerfile.adm

@@ -8,8 +8,7 @@ COPY . /src
 RUN make bin/neofs-adm
 
 # Executable image
-FROM alpine AS neofs-adm
-RUN apk add --no-cache bash
+FROM scratch
 
 WORKDIR /
 

.docker/Dockerfile.cli

@@ -8,8 +8,7 @@ COPY . /src
 RUN make bin/neofs-cli
 
 # Executable image
-FROM alpine AS neofs-cli
-RUN apk add --no-cache bash
+FROM scratch
 
 WORKDIR /
 

.docker/Dockerfile.ir

@@ -8,11 +8,11 @@ COPY . /src
 RUN make bin/neofs-ir
 
 # Executable image
-FROM alpine AS neofs-ir
-RUN apk add --no-cache bash
+FROM scratch
 
 WORKDIR /
 
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /src/bin/neofs-ir /bin/neofs-ir
 
 CMD ["neofs-ir"]

.docker/Dockerfile.storage

@@ -8,11 +8,11 @@ COPY . /src
 RUN make bin/neofs-node
 
 # Executable image
-FROM alpine AS neofs-node
-RUN apk add --no-cache bash
+FROM scratch
 
 WORKDIR /
 
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /src/bin/neofs-node /bin/neofs-node
 
 CMD ["neofs-node"]

.docker/Dockerfile.storage-testnet

@@ -8,11 +8,11 @@ COPY . /src
 RUN make bin/neofs-node
 
 # Executable image
-FROM alpine AS neofs-node
-RUN apk add --no-cache bash
+FROM scratch
 
 WORKDIR /
 
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /src/bin/neofs-node /bin/neofs-node
 COPY --from=builder /src/config/testnet/config.yml /config.yml
 

CHANGELOG.md

@@ -43,6 +43,10 @@ Subnets support has been removed:
 - `neoofs-amd morph` does not have `subnet` subcommand anymore.
 - `neofs-cli container create` does not have `--subnet` flag anymore.
 
+Docker images now contain a single executable file and SSL certificates only.
+
+`neofs-cli control healthcheck` exit code is `0` only for "READY" state.
+
 ## [0.37.0] - 2023-06-15 - Sogado
 
 ### Added

cmd/neofs-cli/modules/control/healthcheck.go

@@ -2,6 +2,7 @@ package control
 
 import (
 	"crypto/ecdsa"
+	"os"
 
 	rawclient "github.com/nspcc-dev/neofs-api-go/v2/rpc/client"
 	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/common"
@@ -60,8 +61,14 @@ func healthCheck(cmd *cobra.Command, _ []string) {
 
 	verifyResponse(cmd, resp.GetSignature(), resp.GetBody())
 
+	healthStatus := resp.GetBody().GetHealthStatus()
+
 	cmd.Printf("Network status: %s\n", resp.GetBody().GetNetmapStatus())
-	cmd.Printf("Health status: %s\n", resp.GetBody().GetHealthStatus())
+	cmd.Printf("Health status: %s\n", healthStatus)
+
+	if healthStatus != control.HealthStatus_READY {
+		os.Exit(1)
+	}
 }
 
 func healthCheckIR(cmd *cobra.Command, key *ecdsa.PrivateKey, c *client.Client) {
@@ -81,5 +88,11 @@ func healthCheckIR(cmd *cobra.Command, key *ecdsa.PrivateKey, c *client.Client)
 
 	verifyResponse(cmd, resp.GetSignature(), resp.GetBody())
 
-	cmd.Printf("Health status: %s\n", resp.GetBody().GetHealthStatus())
+	healthStatus := resp.GetBody().GetHealthStatus()
+
+	cmd.Printf("Health status: %s\n", healthStatus)
+
+	if healthStatus != ircontrol.HealthStatus_READY {
+		os.Exit(1)
+	}
 }