enable cross-compilation, add xcputranslate

Signed-off-by: Batuhan Apaydın <[email protected]>

Author: developer-guy

Dockerfile

@@ -1,15 +1,24 @@
 # Build stage
+# syntax = docker/dockerfile:1.4.2@sha256:443aab4ca21183e069e7d8b2dc68006594f40bddf1b15bbd83f5137bd93e80e2
 ARG goversion
-FROM golang:${goversion}-alpine as builder
-RUN apk add build-base git mercurial
+FROM --platform=${BUILDPLATFORM} golang:${goversion}-alpine as builder
+ARG TARGETPLATFORM
+RUN apk add build-base curl git mercurial
 WORKDIR /spire
-ADD go.mod go.mod
-RUN go mod download
-ADD . .
-RUN make build
+COPY go.* .
+# https://go.dev/ref/mod#module-cache
+RUN --mount=type=cache,target=/go/pkg/mod go mod download
+# 📥 Install xcputranslate for your build architecture
+COPY --from=qmcgaw/xcputranslate:v0.8.0 /xcputranslate /usr/local/bin/xcputranslate
+RUN --mount=type=bind,target=.,rw \
+    --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/go/pkg/mod \
+    GOARCH="$(xcputranslate translate -targetplatform ${TARGETPLATFORM} -language golang -field arch)" \
+    GOARM="$(xcputranslate translate -targetplatform ${TARGETPLATFORM} -language golang -field arm)" \
+    make build
 
 # Common base
-FROM alpine AS spire-base
+FROM --platform=${BUILDPLATFORM} alpine AS spire-base
 RUN apk --no-cache add dumb-init
 RUN apk --no-cache add ca-certificates
 RUN mkdir -p /opt/spire/bin

Dockerfile.scratch

@@ -1,13 +1,21 @@
 # Build stage
 ARG goversion
-FROM golang:${goversion}-alpine as builder
+FROM --platform=${BUILDPLATFORM} golang:${goversion}-alpine as builder
+ARG TARGETPLATFORM
 RUN apk add build-base git mercurial ca-certificates
 RUN apk add --update gcc musl-dev
 WORKDIR /spire
-ADD go.mod go.mod
-RUN go mod download
-ADD . .
-RUN make build-static
+COPY go.* .
+# https://go.dev/ref/mod#module-cache
+RUN --mount=type=cache,target=/go/pkg/mod go mod download
+# 📥 Install xcputranslate for your build architecture
+COPY --from=qmcgaw/xcputranslate:v0.8.0 /xcputranslate /usr/local/bin/xcputranslate
+RUN --mount=type=bind,target=.,rw \
+    --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/go/pkg/mod \
+    GOARCH="$(xcputranslate translate -targetplatform ${TARGETPLATFORM} -language golang -field arch)" \
+    GOARM="$(xcputranslate translate -targetplatform ${TARGETPLATFORM} -language golang -field arm)" \
+    make build-static
 
 # SPIRE Server
 FROM scratch AS spire-server-scratch

Dockerfile.static

@@ -1,39 +1,46 @@
 # Build stage
+# syntax = docker/dockerfile:1.4.2@sha256:443aab4ca21183e069e7d8b2dc68006594f40bddf1b15bbd83f5137bd93e80e2
 ARG goversion
-FROM cgr.dev/chainguard/go:${goversion}-r0 as builder
+FROM --platform=${BUILDPLATFORM} golang:${goversion}-alpine as builder
+ARG TARGETPLATFORM
+RUN apk add build-base curl git mercurial
 WORKDIR /spire
 ENV CGO_ENABLED=1
-ADD go.mod go.mod
-RUN go mod download
-ADD . .
-RUN go build -ldflags '-s -w -linkmode external -extldflags "-static"' -o ./bin/spire-server ./cmd/spire-server
-RUN go build -ldflags '-s -w -linkmode external -extldflags "-static"' -o ./bin/spire-agent ./cmd/spire-agent
-RUN go build -ldflags '-s -w -linkmode external -extldflags "-static"' -o ./bin/k8s-workload-registrar ./support/k8s/k8s-workload-registrar
-RUN go build -ldflags '-s -w -linkmode external -extldflags "-static"' -o ./bin/oidc-discovery-provider ./support/oidc-discovery-provider
+COPY go.* .
+# https://go.dev/ref/mod#module-cache
+RUN --mount=type=cache,target=/go/pkg/mod go mod download
+# 📥 Install xcputranslate for your build architecture
+COPY --from=qmcgaw/xcputranslate:v0.8.0 /xcputranslate /usr/local/bin/xcputranslate
+RUN --mount=type=bind,target=.,rw \
+    --mount=type=cache,target=/root/.cache/go-build \
+    --mount=type=cache,target=/go/pkg/mod \
+    GOARCH="$(xcputranslate translate -targetplatform ${TARGETPLATFORM} -language golang -field arch)" \
+    GOARM="$(xcputranslate translate -targetplatform ${TARGETPLATFORM} -language golang -field arm)" \
+    make build-static
 
 # SPIRE Server
-FROM cgr.dev/chainguard/static:latest AS spire-server-static
+FROM --platform=${BUILDPLATFORM} cgr.dev/chainguard/static:latest AS spire-server-static
 WORKDIR /opt/spire
 COPY --from=builder /spire/bin/spire-server bin/spire-server
 ENTRYPOINT ["/opt/spire/bin/spire-server", "run"]
 CMD []
 
-FROM cgr.dev/chainguard/static:latest AS spire-agent-static
+FROM --platform=${BUILDPLATFORM} cgr.dev/chainguard/static:latest AS spire-agent-static
 WORKDIR /opt/spire
 COPY --from=builder /spire/bin/spire-agent bin/spire-agent
 EXPOSE 8080 8443
 ENTRYPOINT ["/opt/spire/bin/spire-agent", "run"]
 CMD []
 
 # K8S Workload Registrar
-FROM cgr.dev/chainguard/static:latest AS k8s-workload-registrar-static
+FROM --platform=${BUILDPLATFORM} cgr.dev/chainguard/static:latest AS k8s-workload-registrar-static
 WORKDIR /opt/spire
 COPY --from=builder /spire/bin/k8s-workload-registrar bin/k8s-workload-registrar
 ENTRYPOINT ["/opt/spire/bin/k8s-workload-registrar"]
 CMD []
 
 # OIDC Discovery Provider
-FROM cgr.dev/chainguard/static:latest AS oidc-discovery-provider-static
+FROM --platform=${BUILDPLATFORM} cgr.dev/chainguard/static:latest AS oidc-discovery-provider-static
 WORKDIR /opt/spire
 COPY --from=builder /spire/bin/oidc-discovery-provider bin/oidc-discovery-provider
 ENTRYPOINT ["/opt/spire/bin/oidc-discovery-provider"]