Docker: Dockerfile для .NET, multi-stage builds, оптимизация образов?

# ---------- Стадия 1: сборка ----------
FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
WORKDIR /src

# 1) Только файлы проектов → restore кэшируется, пока не меняются зависимости
COPY Directory.Packages.props Directory.Build.props ./
COPY src/Shop.Api/Shop.Api.csproj src/Shop.Api/
COPY src/Shop.Application/Shop.Application.csproj src/Shop.Application/
COPY src/Shop.Domain/Shop.Domain.csproj src/Shop.Domain/
COPY src/Shop.Infrastructure/Shop.Infrastructure.csproj src/Shop.Infrastructure/
RUN dotnet restore src/Shop.Api/Shop.Api.csproj

# 2) Остальной код — меняется часто
COPY . .
RUN dotnet publish src/Shop.Api/Shop.Api.csproj -c Release -o /app/publish --no-restore /p:UseAppHost=false

# ---------- Стадия 2: финальный образ ----------
FROM mcr.microsoft.com/dotnet/aspnet:9.0-noble-chiseled AS final
WORKDIR /app
COPY --from=build /app/publish .
EXPOSE 8080
USER $APP_UID                                   # не root (пользователь app, UID 1654)
ENTRYPOINT ["dotnet", "Shop.Api.dll"]

**/bin/
**/obj/
**/.vs/
**/node_modules/
.git/
*.md
**/appsettings.Development.json
**/*.user
Dockerfile*
docker-compose*

FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
RUN apt-get update && apt-get install -y clang zlib1g-dev      # нужен нативный линковщик
WORKDIR /src
COPY . .
RUN dotnet publish src/Shop.Api/Shop.Api.csproj -c Release -r linux-x64 -p:PublishAot=true -o /app

FROM mcr.microsoft.com/dotnet/runtime-deps:9.0-noble-chiseled
WORKDIR /app
COPY --from=build /app .
USER $APP_UID
ENTRYPOINT ["./Shop.Api"]

dotnet publish src/Shop.Api -c Release /t:PublishContainer \
  -p:ContainerRepository=registry.example.uz/shop-api \
  -p:ContainerImageTag=1.4.2 \
  -p:ContainerBaseImage=mcr.microsoft.com/dotnet/aspnet:9.0-noble-chiseled

docker build -t shop-api:1.4.2 .
docker run -d -p 8080:8080 \
  -e ASPNETCORE_ENVIRONMENT=Production \
  -e ConnectionStrings__Default="Host=db;Database=shop;Username=app;Password=***" \
  --memory=512m --cpus=1 \
  shop-api:1.4.2

services:
  api:
    build: .
    ports: ["8080:8080"]
    environment:
      ConnectionStrings__Default: Host=db;Database=shop;Username=app;Password=dev
    depends_on:
      db: { condition: service_healthy }
  db:
    image: postgres:17-alpine
    environment: { POSTGRES_USER: app, POSTGRES_PASSWORD: dev, POSTGRES_DB: shop }
    healthcheck: { test: ["CMD-SHELL", "pg_isready -U app"], interval: 5s, retries: 10 }