Initial commit

Author: ystxn

.github/workflows/deploy.yml

@@ -0,0 +1,40 @@
+name: Deploy
+
+on:
+  push:
+    branches: [ main ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    outputs:
+      tag: ${{ steps.meta.outputs.tags }}
+    steps:
+    - uses: actions/checkout@v4
+
+    - uses: docker/metadata-action@v5
+      id: meta
+      with:
+        images: ghcr.io/${{ github.repository }}
+        tags: type=sha
+
+    - uses: docker/setup-qemu-action@v3
+      with:
+        platforms: arm64
+
+    - uses: docker/setup-buildx-action@v3
+      with:
+        platforms: linux/arm64
+
+    - uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - uses: docker/build-push-action@v5
+      with:
+        context: .
+        platforms: linux/arm64
+        push: true
+        tags: ${{ steps.meta.outputs.tags }}

Dockerfile

@@ -0,0 +1,21 @@
+FROM ubuntu:mantic as builder
+ARG CHISEL_VER=0.9.0
+WORKDIR /opt
+ADD https://github.com/canonical/chisel/releases/download/v${CHISEL_VER}/chisel_v${CHISEL_VER}_linux_arm64.tar.gz chisel.tar.gz
+RUN apt update \
+    && apt install -y ca-certificates \
+    && tar -xvf chisel.tar.gz -C /usr/bin/ \
+    && mkdir rootfs \
+    && install -d -m 0755 -o 33 -g 33 rootfs/var/www
+RUN chisel cut --release ubuntu-23.10 --root $PWD/rootfs \
+    base-files_var \
+    base-passwd_data \
+    nginx_bins \
+    nginx-common_index
+RUN rm -rf /opt/rootfs/etc/nginx/nginx.conf
+
+FROM scratch
+COPY --from=builder /opt/rootfs /
+COPY nginx /etc/nginx
+EXPOSE 80
+CMD ["nginx", "-g", "daemon off;"]

nginx/conf.d/default.conf

@@ -0,0 +1,15 @@
+server {
+    server_tokens off;
+    listen 80;
+    location / {
+        expires 1M;
+        add_header Cache-Control private;
+        root  /usr/share/nginx/html;
+        index index.html index.htm;
+        try_files $uri $uri/ /index.html;
+    }
+    error_page 500 502 503 504 /50x.html;
+    location = /50x.html {
+        root /usr/share/nginx/html;
+    }
+}

nginx/nginx.conf

@@ -0,0 +1,22 @@
+user www-data;
+worker_processes auto;
+pid /run/nginx.pid;
+error_log /var/log/nginx/error.log;
+include /etc/nginx/modules-enabled/*.conf;
+
+events {
+    worker_connections 768;
+}
+
+http {
+    sendfile on;
+    tcp_nopush on;
+    types_hash_max_size 2048;
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers on;
+    access_log /var/log/nginx/access.log;
+    gzip on;
+    include /etc/nginx/conf.d/*.conf;
+}

readme.md

@@ -0,0 +1,2 @@
+# nginx tiny
+13mb ARM container image to run frontend apps