FROM rust:alpine AS builder WORKDIR /usr/src/app RUN apk add --no-cache musl-dev pkgconfig openssl-dev && rustup target add x86_64-unknown-linux-musl COPY Cargo.toml Cargo.lock ./ COPY crates ./crates COPY apps ./apps ENV RUSTFLAGS='-C target-feature=+crt-static' RUN cargo build --release --bin customers --target x86_64-unknown-linux-musl FROM alpine:latest AS runtime RUN apk add --no-cache ca-certificates RUN adduser -D -u 1000 appuser WORKDIR /app COPY --from=builder /usr/src/app/target/x86_64-unknown-linux-musl/release/customers ./customers USER appuser CMD ["./customers"]