Dockerfile.quic-broker

# syntax=docker/dockerfile:1.7

FROM rust:1.97.1-bookworm@sha256:14bc9c5966e7b3a385794b3d5389a8765668342025fbcc7b2e3d2866ac4bd8c3 AS builder

WORKDIR /workspace
COPY Cargo.toml Cargo.lock rust-toolchain.toml ./
COPY .cargo ./.cargo
COPY crates ./crates
COPY integrations ./integrations
RUN cargo build --locked --release -p transport-quic-broker --bin marmot-quic-broker

FROM debian:bookworm-20260713-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818

ARG DEBIAN_SNAPSHOT=20260713T000000Z

RUN rm -f /etc/apt/sources.list.d/debian.sources \
    && printf 'deb [check-valid-until=no] http://snapshot.debian.org/archive/debian/%s bookworm main\n' "$DEBIAN_SNAPSHOT" \
        > /etc/apt/sources.list \
    && apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && useradd --system --uid 10001 --home-dir /nonexistent --shell /usr/sbin/nologin marmot

COPY --from=builder /workspace/target/release/marmot-quic-broker /usr/local/bin/marmot-quic-broker

USER marmot
EXPOSE 4450/udp
ENTRYPOINT ["marmot-quic-broker"]
CMD ["--bind", "0.0.0.0:4450"]