update: change full.Dockerfile to use the debug variant of the distroless image.

Author: ChanningHe

README.md

@@ -95,7 +95,7 @@ That's it. Labelgate watches your containers and syncs labels to Cloudflare auto
 > | `v0.1.0` | Exact version |
 > | `v0.1` | Latest patch in 0.1.x |
 > | `v0` | Latest minor in 0.x.x |
-> | `v0.1.0-full` | Alpine-based variant with shell and timezone data |
+> | `v0.1.0-full` | debug variant includes busybox shell |
 
 ## Features
 

full.Dockerfile

@@ -38,38 +38,20 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build \
     -ldflags "-s -w -X github.com/channinghe/labelgate/internal/version.Version=${VERSION} -X github.com/channinghe/labelgate/internal/version.Commit=${COMMIT} -X github.com/channinghe/labelgate/internal/version.Date=$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
     -o /app/labelgate ./cmd/labelgate
 
-# Stage 3: Runtime
-FROM alpine:3.21@sha256:c3f8e73fdb79deaebaa2037150150191b9dcbfba68b4a46d70103204c53f4709
+# Stage 3: Runtime — debug variant includes busybox shell for troubleshooting
+FROM gcr.io/distroless/static-debian13:debug-nonroot@sha256:b80e889821affbb581c2743235fe72fca378182a64e7e6313c36aa9a60f6f244
 
 WORKDIR /app
 
-# Install ca-certificates for HTTPS and tzdata for timezone support
-RUN apk add --no-cache ca-certificates tzdata
-
-# Create non-root user
-RUN adduser -D -g '' labelgate
-
-# Copy binary from builder
 COPY --from=builder /app/labelgate /app/labelgate
 
-# Create directories for data and config
-RUN mkdir -p /app/config && \
-    chown -R labelgate:labelgate /app/config
-
-# Note: No config file copied — use environment variables for configuration
-# If you need a config file, mount it at /etc/labelgate/labelgate.yaml
-
-# Switch to non-root user
-USER labelgate
+USER nonroot
 
-# Expose ports
 # 8080: API Server + Dashboard
 # 8081: Agent Server (WebSocket)
 EXPOSE 8080 8081
 
-# Health check
 HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
     CMD ["/app/labelgate", "healthcheck"]
 
-# Default command
 ENTRYPOINT ["/app/labelgate"]