refactor: optimize Dockerfile copy operations and implement multi-stage build for showcase app

aymericzip · aymericzip · commit 69a82eb80f40 · 2026-04-17T09:49:50.000-06:00
diff --git a/apps/app/Dockerfile b/apps/app/Dockerfile
@@ -1,6 +1,5 @@
 # syntax=docker/dockerfile:1.23.0
 
-
 # FROM oven/bun:1.3.2-alpine AS builder
 # Use node because of bun issue blocking at `Creating an optimized production build ...`
 # https://github.com/oven-sh/bun/issues/17136
@@ -63,20 +62,25 @@ ENV NODE_ENV=production
 # Build the app
 RUN bun run build && bun scripts/generate-sw.ts
 
-# Create and use a non-root user for security
-RUN addgroup -S app && adduser -S app -G app && chown -R app:app ./.output
+# Runner — use oven/bun base image to avoid npm install overhead
+FROM oven/bun:1.3.12-alpine AS runner
+
+RUN apk add --no-cache wget
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+
+RUN addgroup -S app && adduser -S app -G app
+
+COPY --from=builder --chown=app:app /workspace/apps/app/.output ./.output
 
 USER app
 
 # Expose the API port (defaults to 3100 via .env, can be overridden)
 EXPOSE 3000
 
-HEALTHCHECK CMD true
-
-# HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
-#   CMD \
-#     wget -qO- http://localhost:3000/ > /dev/null || exit 1 && \
-#     wget -qO- http://localhost:3000/doc/environment/nextjs > /dev/null || exit 1
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
+  CMD wget -qO- http://localhost:3000/ > /dev/null || exit 1
 
-# Start the app server
 CMD ["bun", "run", ".output/server/index.mjs"]
diff --git a/apps/backend/Dockerfile b/apps/backend/Dockerfile
@@ -1,6 +1,7 @@
 # syntax=docker/dockerfile:1.23.0
 
-FROM node:22-alpine AS builder
+# Base stage: system deps shared between builder and runner
+FROM node:22-alpine AS base
 
 RUN npm install -g bun@1.3.12
 
@@ -23,7 +24,9 @@ ENV PUPPETEER_SKIP_DOWNLOAD=true
 ENV PUPPETEER_CACHE_DIR=/home/app/.cache/puppeteer
 ENV TMPDIR=/workspace/apps/backend/tmp
 
-# Create app directory
+# Builder stage
+FROM base AS builder
+
 WORKDIR /workspace
 
 # Copy the monorepo, excluding packages not needed by the backend
@@ -65,7 +68,7 @@ COPY \
     --exclude=examples \
     --exclude=apps/website \
     --exclude=apps/showcase \
-        --exclude=apps/app \
+    --exclude=apps/app \
     --exclude=apps/doc \
     --exclude=**/*.stories.* \
     . .
@@ -75,22 +78,24 @@ COPY docs/blog/en/                 docs/blog/en/
 COPY docs/frequent_questions/en/   docs/frequent_questions/en/
 COPY docs/legal/en/                docs/legal/en/
 
-# Install all dependencies (dev + prod) for the backend filter
 RUN bun install --ignore-scripts --filter=./apps/backend
 
-# Build every package needed by the backend
 RUN bun x turbo run build:ci --filter=./apps/backend
 
-# Strip source files to keep the image slim
+# Strip source files to reduce image size
 RUN find . -path "*/src/*" -type f \( -name "*.ts" -o -name "*.tsx" -o -name "*.map" \) -not -path "*/node_modules/*" -delete
 
+# Runner stage — inherits system deps (chromium etc.) from base
+FROM base AS runner
+
 ENV NODE_ENV=production
 
-# Create a non-root user for security
 RUN addgroup -S app && adduser -S app -G app
 
 RUN mkdir -p /workspace/apps/backend/tmp /home/app/.cache/puppeteer && \
-    chown -R app:app /workspace/apps/backend /home/app/.cache
+    chown -R app:app /workspace /home/app/.cache
+
+COPY --from=builder --chown=app:app /workspace /workspace
 
 WORKDIR /workspace/apps/backend
 
@@ -99,8 +104,7 @@ USER app
 # Expose the API port
 EXPOSE 3100
 
-HEALTHCHECK CMD true
-# HEALTHCHECK --interval=10s --timeout=5s --start-period=120s --retries=5 \
-#   CMD wget --no-verbose --tries=1 --spider http://localhost:3100/health || exit 1
+HEALTHCHECK --interval=10s --timeout=5s --start-period=120s --retries=5 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3100/health || exit 1
 
-CMD ["bun", "dist/esm/index.mjs"]
+CMD ["bun", "dist/esm/index.mjs"]
diff --git a/apps/doc/Dockerfile b/apps/doc/Dockerfile
@@ -1,6 +1,5 @@
 # syntax=docker/dockerfile:1.23.0
 
-
 # FROM oven/bun:1.3.2-alpine AS builder
 # Use node because of bun issue blocking at `Creating an optimized production build ...`
 # https://github.com/oven-sh/bun/issues/17136
@@ -45,7 +44,6 @@ COPY \
     --exclude=plugins \
     --exclude=docs/assets \
     --exclude=examples \
-    --exclude=plugins \
     --exclude=**/*.stories.* \
     . .
 
@@ -63,20 +61,27 @@ ENV NODE_ENV=production
 # Build the doc app
 RUN bun run build && bun scripts/generate-sw.ts
 
-# Create and use a non-root user for security
-RUN addgroup -S app && adduser -S app -G app && chown -R app:app ./.output
+# Runner — use oven/bun base image to avoid npm install overhead
+FROM node:22-alpine AS runner
+
+RUN npm install -g bun@1.3.12
+
+RUN apk add --no-cache wget
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+
+RUN addgroup -S app && adduser -S app -G app
+
+COPY --from=builder --chown=app:app /workspace/apps/doc/.output ./.output
 
 USER app
 
-# Expose the API port (defaults to 3100 via .env, can be overridden)
 EXPOSE 3000
 
-HEALTHCHECK CMD true
-
-# HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
-#   CMD \
-#     wget -qO- http://localhost:3000/ > /dev/null || exit 1 && \
-#     wget -qO- http://localhost:3000/doc/environment/nextjs > /dev/null || exit 1
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
+  CMD \
+    wget -qO- http://localhost:3000/ > /dev/null || exit 1
 
-# Start the doc server
 CMD ["bun", "run", ".output/server/index.mjs"]
diff --git a/apps/showcase/Dockerfile b/apps/showcase/Dockerfile
@@ -63,20 +63,32 @@ ENV NODE_ENV=production
 # Build the showcase app
 RUN bun run build
 
-# Create and use a non-root user for security
-RUN addgroup -S app && adduser -S app -G app && chown -R app:app ./.output
 
-USER app
+# Runner
+FROM node:22-alpine AS runner
+
+# Install bun in the runner stage as well
+RUN npm install -g bun@1.3.12
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+
+# Create a non-root user for security
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
+# Copy ONLY the built output from the builder stage
+COPY --from=builder --chown=appuser:appgroup /workspace/apps/showcase/.output ./.output
+
+USER appuser
 
-# Expose the API port (defaults to 3100 via .env, can be overridden)
 EXPOSE 3000
 
-HEALTHCHECK CMD true
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
+  CMD \
+    wget -qO- http://localhost:3000/ > /dev/null || exit 1 && \
+    wget -qO- http://localhost:3000/doc/environment/nextjs > /dev/null || exit 1
 
-# HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
-#   CMD \
-#     wget -qO- http://localhost:3000/ > /dev/null || exit 1 && \
-#     wget -qO- http://localhost:3000/doc/environment/nextjs > /dev/null || exit 1
 
 # Start the showcase server
-CMD ["bun", "run", ".output/server/index.mjs"]
+CMD ["bun", "run", ".output/server/index.mjs"]
diff --git a/apps/website/Dockerfile b/apps/website/Dockerfile
@@ -106,8 +106,8 @@ RUN addgroup -S appgroup && adduser -S appuser -G appgroup
 
 # Copy only the standalone output and necessary static files from builder
 COPY --from=builder --chown=appuser:appgroup /workspace/apps/website/.next/standalone ./
-COPY --from=builder --chown=appuser:appgroup /workspace/apps/website/public ./apps/website/public
-COPY --from=builder --chown=appuser:appgroup /workspace/apps/website/.next/static ./apps/website/.next/static
+COPY --from=builder --chown=appuser:appgroup /workspace/apps/website/public ./public
+COPY --from=builder --chown=appuser:appgroup /workspace/apps/website/.next/static ./.next/static
 
 USER appuser
 
diff --git a/packages/@intlayer/design-system/Dockerfile b/packages/@intlayer/design-system/Dockerfile
@@ -1,14 +1,10 @@
 # syntax=docker/dockerfile:1.23.0
 
-########################
-# 1) Build stage
-########################
+# Builder stage
 FROM node:22-alpine AS builder
 
 RUN npm install -g bun@1.3.12
 
-# RUN apk add --no-cache nodejs npm wget
-
 # Put the repo in /workspace
 WORKDIR /workspace
 
@@ -41,7 +37,7 @@ COPY \
   --exclude=docs/frequent_questions \
   --exclude=docs/legal \
   --exclude=apps/website \
-    --exclude=apps/app \
+  --exclude=apps/app \
   --exclude=apps/doc \
   --exclude=apps/showcase \
   --exclude=plugins \
@@ -63,25 +59,17 @@ WORKDIR /workspace/packages/@intlayer/design-system
 # Build the intlayer dictionaries (optional if turbo already did what you need)
 RUN bun x intlayer build
 
-HEALTHCHECK CMD true
-# HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
-#   CMD \
-#     wget -qO- http://localhost:6006/ > /dev/null || exit 1
-
-
-
-# Build Storybook to a deterministic path to simplify the copy in the next stage
 ENV STORYBOOK_TELEMETRY=false
 ENV STORYBOOK_STATIC=true
 RUN bun x storybook build --disable-telemetry
 
-########################
-# 2) Runtime
-########################
-FROM node:22-alpine
+# Runner — plain node + serve; no bun needed for static file serving
+FROM node:22-alpine AS runner
 
 RUN npm install -g bun@1.3.12
 
+RUN npm install -g serve && apk add --no-cache wget
+
 WORKDIR /www
 
 
@@ -90,10 +78,8 @@ COPY --from=builder /workspace/packages/@intlayer/design-system/storybook-static
 
 EXPOSE 6006
 
-HEALTHCHECK CMD true
-# HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
-#   CMD \
-#     wget -qO- http://localhost:6006/ > /dev/null || exit 1
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
+  CMD wget -qO- http://localhost:6006/ > /dev/null || exit 1
 
 # -f foreground, -p port, -h doc root
 CMD ["bun", "x", "serve", ".", "-l", "6006"]
diff --git a/packages/@intlayer/mcp/Dockerfile b/packages/@intlayer/mcp/Dockerfile
@@ -1,6 +1,5 @@
 # syntax=docker/dockerfile:1.23.0
 
-
 # FROM oven/bun:1.3.2-alpine AS builder
 # Use node because of bun issue blocking at `Creating an optimized production build ...`
 # https://github.com/oven-sh/bun/issues/17136
@@ -9,13 +8,8 @@ FROM node:22-alpine AS builder
 
 RUN npm install -g bun@1.3.12
 
-# Create app directory
 WORKDIR /workspace
 
-# RUN apk add --no-cache wget
-
-# Copy the rest of the source code
-# Remove directories to keep the image slim
 COPY \
     --exclude=packages/@intlayer/vue-compiler \
     --exclude=packages/@intlayer/svelte-compiler \
@@ -53,7 +47,7 @@ COPY \
     --exclude=apps/website \
     --exclude=apps/showcase \
     --exclude=apps/app \
-        --exclude=apps/doc \
+    --exclude=apps/doc \
     --exclude=**/*.stories.* \
     . .
 
@@ -69,35 +63,33 @@ RUN bun install
 # Build every package in the workspace (uses the root "build" script)
 RUN bun x turbo run build:ci --filter=./packages/@intlayer/mcp
 
-# Remove all dev dependencies
-# RUN CI=true bun pm prune --production
-
-# Remove .ts, .tsx and .map files only within src/** directories, ignoring node_modules, so configuration files like intlayer.config.ts are kept
+# Strip source files to reduce image size
 RUN find . -path "*/src/*" -type f \( -name "*.ts" -o -name "*.tsx" -o -name "*.map" \) -not -path "*/node_modules/*" -delete
 
+# Runner — use oven/bun base image to avoid npm install overhead
+FROM node:22-alpine AS runner
+
+RUN npm install -g bun@1.3.12
+
+
+WORKDIR /app
 
 ENV NODE_ENV=production
 
-# Create and use a non-root user for security
 RUN addgroup -S app && adduser -S app -G app
 
-RUN chown -R app:app /workspace/packages/@intlayer/mcp
-
-WORKDIR /workspace/packages/@intlayer/mcp
+COPY --from=builder --chown=app:app /workspace/packages/@intlayer/mcp/dist ./dist
+COPY --from=builder --chown=app:app /workspace/packages/@intlayer/mcp/package.json ./package.json
+COPY --from=builder --chown=app:app /workspace/node_modules ./node_modules
 
 USER app
 
 # Expose the API port 
 EXPOSE 3000
 
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
+  CMD wget -qO- http://localhost:3000/health > /dev/null || exit 1
 
-HEALTHCHECK CMD true
-# HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
-#   CMD \
-#     wget -qO- http://localhost:3000/health > /dev/null || exit 1
-
-# Option 1: Use mcp-proxy (recommended - simpler)
 CMD ["bun", "run", "start:sse"]
-
 # Option 2: Use stdio transport (alternative)
 # CMD ["bun", "run", "start:stdio"]
