nix: minimize + compress resulting binary (#4)

* nix: add package * nix: add container image * nix: minimize + compress resulting binary --------- Co-authored-by: Lars Sjöström <lars@radicore.se>
shelmangroup · Oct 1, 2024 · cd4ff48 · cd4ff48
1 parent 6cbd91e
commit cd4ff48
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/flake.nix b/flake.nix
@@ -38,12 +38,16 @@
         ];
       in
       {
-        packages = {
+
+        packages = rec {
           default = pkgs.buildGo123Module {
             pname = "envoy-oidc-authserver";
             version = "main";
             src = ./.;
 
+            ldflags = [ "-s -w" ];
+            CGO_ENABLED = "0";
+
             meta = {
               desciption = "Envoy OIDC Authserver";
               homepage = "https://github.com/shelmangroup/envoy-oidc-authserver";
@@ -61,13 +65,17 @@
             prePatch = ''
               HOME="$TMPDIR" ${pkgs.buf}/bin/buf generate
             '';
+
+            postInstall = ''
+              ${pkgs.upx}/bin/upx $out/bin/envoy-oidc-authserver
+            '';
           };
 
           container = pkgs.dockerTools.buildImage {
             name = "envoy-oidc-authserver";
             tag = "latest";
-            copyToRoot = [ self.packages.${system}.default ];
-            config.Entrypoint = [ (lib.getExe self.packages.${system}.default) ];
+            copyToRoot = [ default ];
+            config.Entrypoint = [ "${default}/bin/envoy-oidc-authserver" ];
           };
         };