Optimized Docker Image with Multi-Stage Build

[xbreaker]

Summary

This PR significantly reduces the Docker image size from 2.7GB to ~250MB (over 90% reduction) by implementing a multi-stage build approach and removing unnecessary build dependencies from the final image.

Changes Made

1. Multi-Stage Build Architecture

• Builder Stage: Contains all build tools (Go, Node.js, Task, Goose, SQLC, golangci-lint)
• Runtime Stage: Uses debian:trixie-slim with only essential runtime dependencies

2. Dependency Optimization

Removed from final image:

• Go compiler and toolchain
• Node.js and npm
• Task runner (except Goose for migrations)
• SQLC and golangci-lint
• Git, and other build tools

Retained in final image:

• PostgreSQL clients (13-18) for backup operations
• Goose binary for database migrations
• Application binaries (app and change-password)
• Wget, unzip
• Static files

3. Security Improvements

• Created non-root user pgbackweb for application execution
• Removed build tools that could be exploited
• Minimal attack surface with only required packages

4. Migration Handling

• Migration files are copied to the final image for runtime use

5. Build Process

• All compilation happens in the builder stage
• Only compiled binaries and runtime dependencies are copied to final image

Benefits

• 10x smaller image (2.7GB → ~250MB)
• Faster deployments and reduced storage costs
• Improved security with fewer packages and non-root user
• Same functionality with optimized resource usage

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 239496bd-e53e-47c0-a640-65778e399582

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[apre]

Hi ! 
I would be very interested by this PR, do you need help to finalize it ?

[xbreaker]

@apre my understanding is that the PR has been overlooked for too long and is now obsolete, since the author is carrying out a major refactoring of the build process. Moreover, I see that a multi-stage architecture is utilized, and the image size problem will most likely be resolved after the refactoring.