# Kodit Go Dockerfile
# Multi-stage build with tree-sitter CGo dependencies
# Development stage — hot-reload with Air
FROM golang:1.26-bookworm AS dev
# Install build dependencies for CGo (tree-sitter)
RUN apt-get update && apt-get install -y --no-install-recommends \
build-essential \
git \
&& rm -rf /var/lib/apt/lists/*
# Install Air for hot-reloading
RUN go install github.com/air-verse/air@latest
WORKDIR /app
# Copy go.mod and go.sum for dependency caching
COPY go.mod go.sum ./
RUN --mount=type=cache,target=/go/pkg/mod \
go mod download
# Download ORT and tokenizers to /usr/lib so they survive the volume mount
COPY .ort-version ./
COPY tools/download-ort/ ./tools/download-ort/
RUN ORT_VERSION=$(cat .ort-version) go run ./tools/download-ort \
&& cp ./lib/libonnxruntime.so /usr/lib/ \
&& cp ./lib/libtokenizers.a /usr/lib/ \
&& ldconfig \
&& rm -rf ./lib ./tools .ort-version
ENV CGO_ENABLED=1
ENV CGO_LDFLAGS="-L/usr/lib"
ENV ORT_LIB_DIR="/usr/lib"
EXPOSE 8080
CMD ["air", "-c", ".air.toml"]
# Model stage — downloads and converts the embedding model to ONNX format
# Uses debian-slim variant (not the default distroless) because the Python
# ML dependencies (torch, onnxruntime) need system libraries and a shell.
FROM ghcr.io/astral-sh/uv:debian-slim@sha256:b852203fd7831954c58bfa1fec1166295adcfcfa50f4de7fdd0e684c8bd784eb AS model
WORKDIR /build
COPY cmd/download-model/convert-model.py ./convert-model.py
RUN --mount=type=cache,target=/root/.cache/uv \
uv run --script convert-model.py infrastructure/provider/models/flax-sentence-embeddings_st-codesearch-distilroberta-base
# Build stage — independent from dev, no Air or hot-reload tooling
FROM golang:1.26-bookworm AS builder
# Install build dependencies for CGo (tree-sitter)
RUN apt-get update && apt-get install -y --no-install-recommends \
build-essential \
git \
&& rm -rf /var/lib/apt/lists/*
WORKDIR /app
# Copy go.mod and go.sum for dependency caching
COPY go.mod go.sum ./
RUN --mount=type=cache,target=/go/pkg/mod \
go mod download
# Download ORT and tokenizers
COPY .ort-version ./
COPY tools/download-ort/ ./tools/download-ort/
RUN --mount=type=cache,target=/go/pkg/mod \
ORT_VERSION=$(cat .ort-version) go run ./tools/download-ort \
&& cp ./lib/libonnxruntime.so /usr/lib/ \
&& cp ./lib/libtokenizers.a /usr/lib/ \
&& ldconfig \
&& rm -rf ./lib ./tools .ort-version
ENV CGO_ENABLED=1
ENV CGO_LDFLAGS="-L/usr/lib"
ENV ORT_LIB_DIR="/usr/lib"
# Copy source code first — the model stage runs in parallel until the
# COPY --from=model below, so placing it after COPY . . gives the model
# stage maximum time to finish while the builder prepares source.
COPY . .
COPY --from=model /build/infrastructure/provider/models/ ./infrastructure/provider/models/
# Build the application
ARG VERSION=dev
ARG COMMIT=unknown
ARG BUILD_TIME=unknown
RUN --mount=type=cache,target=/go/pkg/mod \
--mount=type=cache,target=/root/.cache/go-build \
go build -tags "fts5 ORT embed_model" \
-ldflags "-X main.Version=${VERSION} -X main.Commit=${COMMIT} -X main.BuildTime=${BUILD_TIME}" \
-o ./build/kodit ./cmd/kodit
# Final stage — Debian slim for native glibc support
FROM debian:bookworm-slim
# Install runtime dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates \
git \
gosu \
wget \
&& rm -rf /var/lib/apt/lists/*
# Create non-root user
RUN groupadd -g 1000 kodit && \
useradd -u 1000 -g kodit -s /bin/sh -m kodit
# Create data directory
RUN mkdir -p /data && chown kodit:kodit /data
# Copy binary and ORT library from builder
COPY --from=builder /app/build/kodit /usr/local/bin/kodit
COPY --from=builder --chmod=644 /usr/lib/libonnxruntime.so /usr/lib/
# Copy entrypoint script
COPY --chmod=755 docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
# Default data directory (overridable via environment)
ENV DATA_DIR=/data
# Set working directory
WORKDIR /data
# Expose port
EXPOSE 8080
# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
CMD wget --no-verbose --tries=1 --spider http://localhost:8080/healthz || exit 1
# Entrypoint fixes data dir ownership then drops to kodit user
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh", "/usr/local/bin/kodit"]
CMD ["serve"]
