https://github.com/alexfalkowski/docker
Common setup used for my projects.
https://github.com/alexfalkowski/docker
docker golang ruby
Last synced: about 1 month ago
JSON representation
Common setup used for my projects.
- Host: GitHub
- URL: https://github.com/alexfalkowski/docker
- Owner: alexfalkowski
- License: mit
- Created: 2020-09-15T13:08:31.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2026-04-18T08:28:10.000Z (2 months ago)
- Last Synced: 2026-04-18T08:37:39.939Z (2 months ago)
- Topics: docker, golang, ruby
- Language: Dockerfile
- Homepage: https://alexfalkowski.github.io/docker
- Size: 1.73 MB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Agents: AGENTS.md
Awesome Lists containing this project
README
[](https://circleci.com/gh/alexfalkowski/docker)
[](https://masterminds.github.io/stability/active.html)
# Docker
A collection of Docker images (published under `docker.io/alexfalkowski/*`) plus a `compose.yml` for running common local dependencies.
This repository is designed to be driven via `make` targets and CI runs on CircleCI.
## Repository layout
Each top-level directory is an image (or runtime config used by the compose stack):
- Image directories:
- `docker/`, `go/`, `k8s/`, `release/`, `root/`, `ruby/`
- Each contains:
- `Dockerfile`
- `Makefile` declaring `IMAGE` and `VERSION`
- `.hadolint.yaml` (image-specific hadolint rule suppressions)
- `scripts/install-image-tool.d/` snippets for image-specific tool installs, when needed
- Local dependency stack:
- `compose.yml`
- `grafana/`, `otelcol/`, `prometheus/`, `status/` (config mounted into compose services)
- Shared build targets:
- `make/docker.mk` (used by all image Makefiles)
- Helper scripts:
- `scripts/compose` (prefers `podman compose`, falls back to `docker compose`)
- `scripts/clean` (prunes unused images)
- `scripts/clean-go` (shared Go cache cleanup runner: `clean-go`)
- `scripts/install-go-tool` (shared Go build-time installer runner: `install-go-tool `)
- `scripts/install-image-tool` (shared image build-time installer runner: `install-image-tool [version]`)
- `scripts/install-image-tool.d/` (shared install snippets used by multiple images)
- `scripts/lint` (runs hadolint + shellcheck)
## Prerequisites
- GNU Make 4 or newer
- On macOS, install GNU Make and use `gmake`; the system `/usr/bin/make` 3.81 cannot parse the shared `bin/` make fragments.
- `git`
- `docker` or `podman`
- `hadolint` and `shellcheck` (required for `make lint`)
Examples below use `make`; substitute `gmake` if GNU Make is installed under that name.
### Submodule (required)
The top-level `Makefile` includes make fragments from the `bin/` submodule. If `bin/` is missing, most `make` targets will fail.
```sh
git submodule sync
git submodule update --init
```
## Make targets
List available targets:
```sh
make
# or
make help
```
On macOS with Homebrew GNU Make:
```sh
gmake help
```
### Lint
Lint everything (Dockerfiles + shell scripts):
```sh
make lint
```
What it does (see `scripts/lint`):
- Runs `hadolint` against every `Dockerfile` in the repo (excluding `./bin`).
- Runs `shellcheck` against:
- `scripts/lint`, `scripts/clean`, `scripts/clean-go`, `scripts/compose`, `scripts/install-go-tool`, `scripts/install-image-tool`
- `release/deploy`, `release/package`, `release/version`
- shared `scripts/install-image-tool.d/*` snippets
- per-image `scripts/install-image-tool.d/*` snippets
### Build images locally
Each image directory has a `Makefile` that sets `IMAGE` and `VERSION` and then includes `../make/docker.mk`.
The shared build targets run from the image directory but use the repository root as Docker build context so Dockerfiles can copy the shared installer script.
Dockerfiles pass tool versions directly to `install-image-tool [version]`; installer snippets keep defaults for manual use.
Go tools are installed with `install-go-tool `, which runs `go install @`.
Go caches are cleaned with `clean-go`.
Build an image locally:
```sh
make -C go build-docker
```
That produces a local image tagged like:
- `alexfalkowski/go:` (based on `go/Makefile`)
Build another image:
```sh
make -C docker build-docker
```
### Build/push platform-tagged images
The shared make targets support per-platform tags of the form `.`.
Build:
```sh
make -C go platform=amd64 build-platform-docker
make -C go platform=arm64 build-platform-docker
```
Push (requires DockerHub login):
```sh
make -C go platform=amd64 push-platform-docker
make -C go platform=arm64 push-platform-docker
```
### Create multi-arch manifests
After pushing platform images, publish multi-arch manifests:
```sh
make -C go manifest-platform-docker
```
This pushes two manifests:
- `alexfalkowski/go:`
- `alexfalkowski/go` (equivalent to `:latest`)
## Compose (local dependencies)
The `compose.yml` file is intended to provide a shared set of local dependencies used by multiple projects.
The repository wraps compose via `scripts/compose`, which:
- uses `podman compose` when `podman` is available
- otherwise uses `docker compose`
### Pull
```sh
make docker-pull
# pull a single service
make docker-pull service=postgres
```
### Start/stop
```sh
make start
# start a single service
make start service=redis
make stop
```
### Logs
```sh
make logs service=postgres
```
### Included services
From `compose.yml`:
| Service | Image | Ports (host:container) | Notes |
|---|---|---:|---|
| `postgres` | `postgres:18-trixie` | `5432:5432` | `POSTGRES_USER=test`, `POSTGRES_PASSWORD=test` |
| `redis` | `valkey/valkey:9` | `6379:6379` | |
| `aws` | `hectorvent/floci` | `4566:4566` | `SERVICES=s3,sqs,ssm` |
| `vault` | `hashicorp/vault:1.21` | `8200:8200` | dev token: `vault-plaintext-root-token` |
| `prometheus` | `prom/prometheus:v3` | `9090:9090` | depends on `mimir` |
| `mimir` | `grafana/mimir` | `9009:9009` | mounts `./grafana` |
| `loki` | `grafana/loki` | `3100:3100` | mounts `./grafana` |
| `memcached` | `memcached:1.6` | `11211:11211` | cache backend for `tempo` |
| `tempo` | `grafana/tempo:2.10` | `3200:3200` | depends on `memcached` |
| `otel-collector` | `otel/opentelemetry-collector-contrib` | `4317:4317`, `4318:4318` | OTLP gRPC/HTTP ingress |
| `grafana` | `grafana/grafana-oss` | `10000:3000` | depends on metrics/logs/traces stack |
| `status` | `alexfalkowski/status` | `15000:8080`, `15001:6060` | mounts `./status` |
| `flipt` | `flipt/flipt` | `8080:8080`, `9000:9000` | |
Examples:
```sh
# Connect to postgres
psql "postgresql://test:test@localhost:5432/postgres"
# Vault dev login
export VAULT_ADDR="http://127.0.0.1:8200"
vault login "vault-plaintext-root-token"
# Grafana UI
open "http://127.0.0.1:10000"
```
## Clean unused images
Warning: this is destructive.
```sh
make clean
```
This runs `docker image prune -a -f` (or the podman equivalent) via `scripts/clean`.
## CI (CircleCI)
CircleCI is configured as a setup workflow using path-filtering:
- `.circleci/config.yml` maps changed paths to pipeline parameters.
- `.circleci/continue_config.yml` contains the actual per-image build/lint/push workflows.
On `master`, CI pushes platform images and manifests (requires `DOCKERHUB_USERNAME` and `DOCKERHUB_PASS`).