Pin the builder to Hugo 0.164.0 and fix the compose working directory

0.164.0 is the newest stable release (2026-07-06) and the site builds clean
on it: 186 pages, no WARN, no ERROR. Pin rather than track :latest so
rebuilding the image cannot silently change the site.

Correct the Dockerfile rationale. The claim that rcourt/docsy-builder:Feb2023
predated the theme's minimum was wrong: it carries Hugo 0.122.0 extended and
does build this branch, byte-identical CSS and JS against 0.164.0. The real
reasons to replace it are that it has no rsync, which deploy.sh needs, and
that it warns about the minimum theme.toml declares.

Record that the base is Alpine 3.22, that the upstream image already carries
git, Node, npm and Dart Sass, and that running as root is deliberate because
the published tree on the NFS volume is root-owned.

The official image sets WORKDIR to /project, so compose needs an explicit
working_dir for the source mounted at /src. Drop the obsolete version key.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01X1AuLA5tHPwpD7Hp5utPkS

Author: Robbie1977

Dockerfile

@@ -3,16 +3,27 @@
 #   docker build -t vfb-static-builder .
 #   docker run --rm -v "$PWD:/src" -v vfb_cache:/tmp vfb-static-builder
 #
-# Standard Hugo is deliberate: the theme ships plain CSS concatenated by Hugo
-# rather than Sass, so it needs neither the extended edition nor Dart Sass, and
-# no Node toolchain. bash and rsync are added for deploy.sh, which stages the
-# build and syncs it into the served directory rather than writing there
-# directly.
+# v0.164.0 is the newest stable Hugo (released 2026-07-06) and the site builds
+# clean on it: 186 pages, no WARN, no ERROR. Pinned rather than :latest so
+# rebuilding this image cannot silently change the site.
 #
-# Replaces klakegg/hugo, which is unmaintained and predates the minimum this
-# site needs (Hugo 0.128.0).
+# The theme's declared minimum is 0.128.0 (`[pagination] pagerSize`). It does
+# also build on 0.122.0, which is what rcourt/docsy-builder:Feb2023 carries, but
+# that image has no rsync and warns about the declared minimum.
+#
+# Base is Alpine 3.22, so apk is correct. The upstream image already carries
+# git, Node, npm and Dart Sass. This site needs none of them — the theme ships
+# plain CSS concatenated by Hugo, so even the extended edition is optional — but
+# they come with the official image and are not worth stripping out.
+#
+# bash and rsync are for deploy.sh, which stages the build and syncs it into the
+# served directory rather than writing there directly. findutils replaces
+# busybox find so the page-count gate behaves predictably.
 FROM ghcr.io/gohugoio/hugo:v0.164.0
 
+# Deliberately root, unlike the upstream image's hugo:hugo. The published tree
+# on the NFS volume is owned by root from the klakegg-era builds, so an
+# unprivileged rsync could not overwrite it.
 USER root
 RUN apk add --no-cache bash rsync findutils
 

docker-compose.yaml

@@ -1,9 +1,18 @@
-version: "3.3"
-
+# Local preview only. The nightly build runs the image built from ./Dockerfile;
+# this uses the official Hugo image unmodified because `hugo server` needs
+# neither bash nor rsync.
+#
+#   docker compose up
+#   open http://localhost:1313/
+#
+# The image's ENTRYPOINT is Hugo's own wrapper, so `command:` is Hugo's
+# arguments. Its WORKDIR is /project, hence the explicit working_dir — the
+# source is mounted at /src to match the Rancher build service.
 services:
   site:
     image: ghcr.io/gohugoio/hugo:v0.164.0
     command: server --bind 0.0.0.0 --port 1313 --disableFastRender
+    working_dir: /src
     ports:
       - "1313:1313"
     volumes: