luckberg/familysync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(260618-tg2): BuildKit pnpm-store cache mount in Dockerfile build

Browse Source 
Add 'RUN --mount=type=cache,target=/pnpm-store' to all 3 pnpm install
stages (builder/pwa-builder/production) with --store-dir /pnpm-store, plus
the '# syntax=docker/dockerfile:1' directive. Set DOCKER_BUILDKIT=1 on the
publish build step so the legacy builder can't break on the mount syntax.
sharing=locked because builder and pwa-builder run in parallel.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Lucas Berger
2026-06-18 21:19:45 -04:00
co-authored by Claude Opus 4.8
parent f83d423e1c
commit 6e93e24df0
2 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/publish.yml
+5
View File
@@ -88,6 +88,11 @@ jobs:
# Build from REPO ROOT (T-08-10): the Dockerfile copies the pnpm workspace manifest +
# lockfile from the root context; building from apps/api/ would fail to find them.
- name: Build production image
# DOCKER_BUILDKIT=1 is required: the Dockerfile uses `RUN --mount=type=cache`
# (BuildKit) to persist the pnpm store across builds. The legacy builder would
# fail on that syntax. BuildKit is default on Docker 23+, set explicitly for safety.
env:
DOCKER_BUILDKIT: '1'
run: |
set -euo pipefail
docker build --target production \
apps/api/Dockerfile
+7 -3
View File
@@ -1,3 +1,4 @@
# syntax=docker/dockerfile:1
# Built from the REPO ROOT context (see docker-compose.yml: build.context: .)
# so the pnpm workspace manifest + lockfile are available for a deterministic,
# workspace-aware install. apps/api is one package in the pnpm workspace.
@@ -12,7 +13,8 @@ FROM base AS builder
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json ./
COPY apps/api/package.json ./apps/api/
COPY apps/pwa/package.json ./apps/pwa/
RUN pnpm install --frozen-lockfile --filter @familysync/api...
RUN --mount=type=cache,target=/pnpm-store,id=pnpm-store,sharing=locked \
pnpm install --frozen-lockfile --filter @familysync/api... --store-dir /pnpm-store
COPY apps/api ./apps/api
RUN pnpm --filter @familysync/api build
@@ -28,7 +30,8 @@ FROM base AS pwa-builder
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json ./
COPY apps/api/package.json ./apps/api/
COPY apps/pwa/package.json ./apps/pwa/
RUN pnpm install --frozen-lockfile --filter @familysync/pwa...
RUN --mount=type=cache,target=/pnpm-store,id=pnpm-store,sharing=locked \
pnpm install --frozen-lockfile --filter @familysync/pwa... --store-dir /pnpm-store
COPY apps/pwa ./apps/pwa
RUN pnpm --filter @familysync/pwa build
@@ -36,7 +39,8 @@ FROM base AS production
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json ./
COPY apps/api/package.json ./apps/api/
COPY apps/pwa/package.json ./apps/pwa/
RUN pnpm install --frozen-lockfile --prod --filter @familysync/api...
RUN --mount=type=cache,target=/pnpm-store,id=pnpm-store,sharing=locked \
pnpm install --frozen-lockfile --prod --filter @familysync/api... --store-dir /pnpm-store
COPY --from=builder /app/apps/api/dist ./apps/api/dist
WORKDIR /app/apps/api
# Enforce production identity — engages the NODE_ENV=production hard guard