Motivation

Previously, two Dockerfiles had to be maintained for dev and prod. And some assumptions were made on the user environment and security practices.

Solution

• Use a single Dockerfile with multistage
• Add missing files to .dockerignore
• Change cargo-chef implementation with the standard cache mounts from Docker to improve caching
• Define a USER to disallow running the production container with the root user
• Add required build arguments and environment variables
• Allow to change the logs behavior at build time
• Use debian instead of ubuntu