docker: scratch -> distroless

.docker/Dockerfile.universal

@@ -1,14 +1,8 @@
-# https://blog.codeship.com/building-minimal-docker-containers-for-go-applications
-FROM scratch
-
-ADD .docker/ca-certificates.crt /etc/ssl/certs/
-ADD .docker/passwd.nobody /etc/passwd
+FROM gcr.io/distroless/static
 
 ARG TARGETPLATFORM
 ADD .docker/${TARGETPLATFORM}/anycable-go /usr/local/bin/anycable-go
 
-USER nobody
-
 EXPOSE 8080
 
 ENTRYPOINT ["/usr/local/bin/anycable-go"]

Makefile

@@ -102,6 +102,11 @@ build-all: build-clean build-linux
 	env GOOS=freebsd GOARCH=arm   $(GOBUILD) -o "dist/anycable-go-freebsd-arm"   cmd/anycable-go/main.go
 	env GOOS=freebsd GOARCH=amd64 $(GOBUILD) -o "dist/anycable-go-freebsd-amd64" cmd/anycable-go/main.go
 
+build-docker-local:
+	env GOOS=linux   GOARCH=arm64 $(GOBUILD) -o ".docker/linux/arm64/anycable-go"   cmd/anycable-go/main.go
+	docker buildx build --platform linux/arm64 --file .docker/Dockerfile.universal --tag anycable/anycable-go:$(subst v,,$(VERSION))-dev --load .
+	docker buildx build --platform linux/arm64 --file .docker/Dockerfile.alpine --tag anycable/anycable-go:$(subst v,,$(VERSION))-alpine-dev --load .
+
 # Run server
 run:
 	go run -ldflags $(LD_FLAGS) -tags "mrb gops" ./cmd/anycable-go/main.go