feat: add distroless image

.gitlab-ci.yml

@@ -377,6 +377,7 @@ test-mac-m1:
         compare_to: *main-branch
         paths:
           - helm/picodata.Dockerfile
+          - helm/picodata.distroless
           - helm/docker-compose.yml
       variables:
         PUSH_DOCKER: "--no-push"
@@ -393,6 +394,8 @@ test-helm-image:
     matrix:
       - DOCKERFILE: helm/picodata.Dockerfile
         DESTINATION: ${REGISTRY}/picodata:master
+      - DOCKERFILE: helm/picodata.distroless
+        DESTINATION: ${REGISTRY}/picodata:master-distroless        
   trigger:
     project: picodata/devops/picodata-in-docker
     branch: main
@@ -505,6 +508,8 @@ deploy-docker:
     matrix:
       - DOCKERFILE: helm/picodata.Dockerfile
         DESTINATION: ${REGISTRY}/picodata:${CI_COMMIT_TAG}
+      - DOCKERFILE: helm/picodata.distroless
+        DESTINATION: ${REGISTRY}/picodata:${CI_COMMIT_TAG}-distroless
   trigger:
     project: picodata/devops/picodata-in-docker
     branch: main

helm/picodata.distroless

+FROM debian:12 AS builder
+
+RUN set -e; \
+    apt update -y && \
+    apt install -y \
+        autoconf \
+        build-essential \
+        cmake \
+        curl \
+        git \
+        libcurl4-openssl-dev \
+        libicu-dev \
+        libldap2-dev \
+        libreadline-dev \
+        libsasl2-dev \
+        libssl-dev \
+        libtool \
+        libunwind-dev \
+        libyaml-dev \
+        libzstd-dev \
+        make \
+        ncurses-dev \
+        pkg-config
+
+RUN set -e; \
+    curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
+    sh -s -- -y --profile default --default-toolchain 1.76.0
+ENV PATH=/root/.cargo/bin:${PATH}
+
+RUN curl -SLO https://deb.nodesource.com/nsolid_setup_deb.sh && \
+    chmod 755 nsolid_setup_deb.sh && \
+    ./nsolid_setup_deb.sh 21 && \
+    apt install -y nodejs && \
+    corepack enable
+
+WORKDIR /build/picodata
+COPY . .
+RUN cargo build --locked --release --features webui
+
+
+FROM docker-public.binary.picodata.io/distroless/cc-debian12
+
+COPY --from=builder /build/picodata/target/release/picodata /usr/bin/picodata
+
+WORKDIR /var/lib/picodata
+
+ENTRYPOINT ["/usr/bin/picodata"]
+CMD ["run"]