# 查看镜像层及每层大小
docker history myapp:latest

# 输出示例：
# IMAGE          CREATED        SIZE    COMMENT
# <missing>      2 hours ago    0B      COPY . . # 每层大小
# <missing>      2 hours ago    45MB    RUN npm ci --production
# <missing>      3 hours ago    5MB     COPY package.json ./

# 安装 dive
# https://github.com/wagoodman/dive

# 交互式分析
dive myapp:latest

# CI 模式
dive myapp:latest --ci

docker scout quickview myapp:latest
docker scout cves myapp:latest

# ❌ 多层，每层都保留删除前的内容
FROM ubuntu:22.04
RUN apt-get update
RUN apt-get install -y curl
RUN apt-get clean
RUN rm -rf /var/lib/apt/lists/*
# 最终体积: ~120MB（清理无效，前层仍保留）

# ✅ 合并为一层
FROM ubuntu:22.04
RUN apt-get update && \
    apt-get install -y --no-install-recommends curl && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*
# 最终体积: ~80MB

# ❌ 使用完整 Ubuntu
FROM ubuntu:22.04
# 基础体积: 77MB

# ✅ 使用 slim
FROM debian:bookworm-slim
# 基础体积: 75MB

# ✅✅ 使用 Alpine
FROM alpine:3.19
# 基础体积: 7MB

# ✅✅✅ 使用 Distroless
FROM gcr.io/distroless/static-debian12:nonroot
# 基础体积: 2MB

FROM golang:1.22-alpine AS builder

# 安装 UPX
RUN apk add --no-cache upx

WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .

# 编译
RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /server ./cmd/server

# 使用 UPX 压缩（--best 最高压缩率）
RUN upx --best --lzma /server

# 验证
RUN ls -lh /server
# 压缩前: 15MB
# 压缩后: 5MB

FROM golang:1.22-alpine AS builder
WORKDIR /src
COPY . .
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
    go build \
    -ldflags="-s -w -extldflags '-static'" \
    -trimpath \
    -o /server \
    ./cmd/server

# -s: 去除符号表
# -w: 去除 DWARF 调试信息
# -trimpath: 去除编译路径信息
# 效果: 15MB → 8MB

FROM gcc:13 AS builder
WORKDIR /src
COPY . .

# 编译并剥离符号
RUN gcc -O2 -o app app.c && \
    strip --strip-all app

# 对比
RUN ls -lh app
# 剥离前: 1.2MB
# 剥离后: 600KB

FROM rust:1.77-alpine AS builder
RUN apk add --no-cache musl-dev
WORKDIR /src
COPY . .

# Cargo.toml 中配置：
# [profile.release]
# strip = true
# lto = true
# codegen-units = 1
# opt-level = "z"

RUN cargo build --release

# 或手动剥离
RUN strip target/release/server

# Cargo.toml
[profile.release]
strip = true       # 剥离符号
lto = true         # 链接时优化
codegen-units = 1  # 单编译单元（更优化但编译慢）
opt-level = "z"    # 优化体积而非速度
panic = "abort"    # panic 时直接 abort

# ❌ 安装所有依赖（包括 devDependencies）
RUN npm install
# node_modules: 300MB

# ✅ 仅安装生产依赖
RUN npm ci --production
# node_modules: 80MB

# ✅✅ 使用 npm ci + 清理
RUN npm ci --production && npm cache clean --force
# 更小

# ❌ 默认 pip 缓存
RUN pip install -r requirements.txt
# ~/.cache/pip 增加数十 MB

# ✅ 禁用缓存
RUN pip install --no-cache-dir -r requirements.txt

# ✅✅ 使用 --prefix 分离后复制
RUN pip install --no-cache-dir --prefix=/install -r requirements.txt
# 从 builder 阶段仅复制 /install

# ✅ 使用 Spring Boot 分层 JAR
FROM eclipse-temurin:21-jdk-alpine AS builder
WORKDIR /app
COPY target/*.jar app.jar
RUN java -Djarmode=layertools -jar app.jar extract

FROM eclipse-temurin:21-jre-alpine
COPY --from=builder /app/dependencies/ ./
COPY --from=builder /app/spring-boot-loader/ ./
COPY --from=builder /app/snapshot-dependencies/ ./
COPY --from=builder /app/application/ ./
ENTRYPOINT ["java", "org.springframework.boot.loader.launch.JarLauncher"]

FROM python:3.12-slim

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
        gcc \
        libpq-dev \
    && pip install --no-cache-dir -r requirements.txt \
    && apt-get purge -y --auto-remove gcc \
    && rm -rf /var/lib/apt/lists/* \
              /tmp/* \
              /var/tmp/* \
              /root/.cache \
              /usr/share/doc \
              /usr/share/man \
              /usr/share/locale

# 阶段一：完整镜像（无优化）
FROM golang:1.22
WORKDIR /src
COPY . .
RUN go build -o /server ./cmd/server
# 最终镜像大小: ~1.2GB

# 阶段二：Alpine 基础镜像
FROM golang:1.22-alpine
WORKDIR /src
COPY . .
RUN go build -o /server ./cmd/server
# 最终镜像大小: ~350MB

# 阶段三：多阶段构建
FROM golang:1.22-alpine AS builder
WORKDIR /src
COPY . .
RUN go build -o /server ./cmd/server
FROM alpine:3.19
COPY --from=builder /server /server
# 最终镜像大小: ~30MB

# 阶段四：静态编译 + Distroless
FROM golang:1.22-alpine AS builder
WORKDIR /src
COPY . .
RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /server ./cmd/server
FROM gcr.io/distroless/static-debian12:nonroot
COPY --from=builder /server /server
# 最终镜像大小: ~10MB

# 阶段五：UPX 压缩
FROM golang:1.22-alpine AS builder
RUN apk add --no-cache upx
WORKDIR /src
COPY . .
RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /server ./cmd/server && \
    upx --best --lzma /server
FROM scratch
COPY --from=builder /server /server
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
# 最终镜像大小: ~5MB