FROM golang:alpine as builder RUN adduser -D -g '' appuser RUN mkdir /build ADD . /build/ WORKDIR /build RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -trimpath -gcflags 'all=-e' -ldflags "-s -w" -o main . RUN apk add --no-cache ca-certificates FROM scratch COPY --from=builder /etc/passwd /etc/passwd COPY --from=builder /etc/ssl/cert.pem /etc/ssl/cert.pem COPY --from=builder /build/main /main USER appuser EXPOSE 8080 ENTRYPOINT ["/main"]