Dockerfile.prebuilt

# ---------- Stage 1: runtime prep ----------
FROM busybox:1.36.1-musl AS runtime-prep

RUN mkdir -p /runtime/usr/local/bin /runtime/data/rocksdb /runtime/data/storage /runtime/data/logs /runtime/config && \
    cp /bin/busybox /runtime/usr/local/bin/busybox

COPY backend/server.example.toml /runtime/config/server.toml
RUN sed -i 's|data_path = "\./data"|data_path = "/data"|g' /runtime/config/server.toml
RUN sed -i 's|format = "compact"|format = "json"|g' /runtime/config/server.toml


# ---------- Stage 2: binary prep ----------
FROM ubuntu:24.04 AS binary-prep

RUN apt-get update -o Acquire::Retries=3 && \
    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
        binutils ca-certificates && \
    rm -rf /var/lib/apt/lists/*

RUN mkdir -p /staged/usr/local/bin

COPY --from=binaries kalamdb-server /staged/usr/local/bin/kalamdb-server
COPY --from=binaries kalam /staged/usr/local/bin/kalam-cli

RUN chmod 755 /staged/usr/local/bin/* && \
    strip --strip-unneeded /staged/usr/local/bin/* || true


# ---------- Stage 3: final runtime ----------
FROM ubuntu:24.04

ARG OCI_IMAGE_TITLE="KalamDB"
ARG OCI_IMAGE_DESCRIPTION="KalamDB database server"
ARG OCI_IMAGE_URL="https://kalamdb.org"
ARG OCI_IMAGE_SOURCE="https://github.com/kalamdb/KalamDB"
ARG OCI_IMAGE_DOCUMENTATION="https://kalamdb.org/docs"
ARG OCI_IMAGE_VENDOR="KalamDB"
ARG OCI_IMAGE_AUTHORS="Jamal Saad"
ARG OCI_IMAGE_LICENSES="Apache-2.0"
ARG OCI_IMAGE_VERSION="dev"
ARG OCI_IMAGE_REVISION="unknown"
ARG OCI_IMAGE_CREATED="unknown"

LABEL org.opencontainers.image.title="$OCI_IMAGE_TITLE" \
      org.opencontainers.image.description="$OCI_IMAGE_DESCRIPTION" \
      org.opencontainers.image.url="$OCI_IMAGE_URL" \
      org.opencontainers.image.source="$OCI_IMAGE_SOURCE" \
      org.opencontainers.image.documentation="$OCI_IMAGE_DOCUMENTATION" \
      org.opencontainers.image.vendor="$OCI_IMAGE_VENDOR" \
      org.opencontainers.image.authors="$OCI_IMAGE_AUTHORS" \
      org.opencontainers.image.licenses="$OCI_IMAGE_LICENSES" \
      org.opencontainers.image.version="$OCI_IMAGE_VERSION" \
      org.opencontainers.image.revision="$OCI_IMAGE_REVISION" \
      org.opencontainers.image.created="$OCI_IMAGE_CREATED"

RUN apt-get update -o Acquire::Retries=3 && \
    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
        ca-certificates bash busybox-static && \
    rm -rf /var/lib/apt/lists/*

# create user
RUN groupadd -g 65532 kalamdb && \
    useradd -u 65532 -g kalamdb -d /data -s /bin/bash kalamdb

# copy binaries
COPY --from=binary-prep --chmod=755 /staged/usr/local/bin/kalamdb-server /usr/local/bin/
COPY --from=binary-prep --chmod=755 /staged/usr/local/bin/kalam-cli /usr/local/bin/
RUN ln -sf /usr/local/bin/kalam-cli /usr/local/bin/kalam

# copy runtime assets
COPY --from=runtime-prep --chown=65532:65532 /runtime/data /data
COPY --from=runtime-prep --chown=65532:65532 /runtime/config /config

RUN mkdir -p /data/.kalam && \
    chown -R 65532:65532 /data /config

ENV HOME=/data

# mimalloc tuning for low idle RSS in the published container image.
# Deployments that want higher concurrency can still override server config or
# allocator knobs explicitly at runtime.
ENV MIMALLOC_PURGE_DELAY=0
ENV MIMALLOC_PURGE_DECOMMITS=1
ENV MIMALLOC_EAGER_COMMIT=0
ENV MIMALLOC_ARENA_EAGER_COMMIT=0
ENV MIMALLOC_ABANDONED_PAGE_PURGE=1
ENV MIMALLOC_ALLOW_THP=0

USER 65532:65532
WORKDIR /data

VOLUME ["/data"]

EXPOSE 2900

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD ["/bin/busybox", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:2900/health"]

CMD ["/usr/local/bin/kalamdb-server", "/config/server.toml"]