refactor: optimize Dockerfile for improved build efficiency (#3386)

Author: idoshamun

Dockerfile

@@ -1,36 +1,31 @@
+# syntax=docker/dockerfile:1
 FROM node:22.16-bookworm-slim
 
 ADD https://www.apple.com/appleca/AppleIncRootCertificate.cer /usr/local/share/ca-certificates/AppleIncRootCertificate.cer
 ADD https://www.apple.com/certificateauthority/AppleRootCA-G2.cer /usr/local/share/ca-certificates/AppleRootCA-G2.cer
 ADD https://www.apple.com/certificateauthority/AppleRootCA-G3.cer /usr/local/share/ca-certificates/AppleRootCA-G3.cer
 
-RUN chmod 644 /usr/local/share/ca-certificates/AppleIncRootCertificate.cer && \
-    chmod 644 /usr/local/share/ca-certificates/AppleRootCA-G2.cer && \
-    chmod 644 /usr/local/share/ca-certificates/AppleRootCA-G3.cer
+RUN chmod 644 /usr/local/share/ca-certificates/*.cer && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates dumb-init && \
+    update-ca-certificates && \
+    rm -rf /var/lib/apt/lists/* && \
+    npm install -g corepack@0.31.0 && \
+    mkdir -p /opt/app && \
+    chown -R node:node /opt/app
 
-RUN apt-get update \
-    && apt-get install -y ca-certificates dumb-init \
-    && update-ca-certificates \
-    && rm -rf /var/lib/apt/lists/*
-
-RUN mkdir -p /opt/app
 WORKDIR /opt/app
 
-RUN npm install -g corepack@0.31.0
+COPY --chown=node:node .npmrc package.json pnpm-lock.yaml ./
+COPY --chown=node:node patches patches
+COPY --chown=node:node queries queries
+COPY --chown=node:node clickhouse/migrations/*.sql clickhouse/migrations/
 
-COPY .npmrc .
-COPY package.json .
-COPY pnpm-lock.yaml .
-COPY patches patches
-COPY queries queries
-COPY clickhouse/migrations/*.sql clickhouse/migrations/
+USER node
 
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/home/node/.local/share/pnpm/store \
+    pnpm install --frozen-lockfile
 
-COPY build .
-
-RUN chown -R node:node /opt/app
-USER node
+COPY --chown=node:node build .
 
 CMD ["dumb-init", "node", "bin/cli", "api"]
-