FROM --platform=$BUILDPLATFORM ubuntu:24.04@sha256:d1e2e92c075e5ca139d51a140fff46f84315c0fdce203eab2807c7e495eff4f9 AS build

ARG UBUNTU_SNAPSHOT=20260301T000000Z

ARG RUSTUP_VERSION=1.28.1

ENV HOME="/root"

WORKDIR $HOME

RUN echo 'Acquire::Retries "3";' > /etc/apt/apt.conf.d/80-retries

RUN --mount=type=cache,target=/var/lib/apt/lists \

apt install -y --update ca-certificates && \

apt install -y --update --snapshot ${UBUNTU_SNAPSHOT} --no-install-recommends \

build-essential \

curl

COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv

COPY pyproject.toml uv.lock ./

RUN uv sync --only-group docker --locked

ENV PATH="$HOME/.venv/bin:$PATH"

ARG TARGETPLATFORM

RUN case "$TARGETPLATFORM" in \

"linux/arm64") echo "aarch64-unknown-linux-musl" > rust_target.txt ;; \

"linux/amd64") echo "x86_64-unknown-linux-musl" > rust_target.txt ;; \

*) exit 1 ;; \

esac

RUN curl --proto '=https' --tlsv1.2 -sSf \

"https://static.rust-lang.org/rustup/archive/${RUSTUP_VERSION}/$(uname -m)-unknown-linux-gnu/rustup-init" \

-o rustup-init \

&& chmod +x rustup-init \

&& ./rustup-init -y --target $(cat rust_target.txt) --profile minimal --default-toolchain none \

&& rm rustup-init

ENV PATH="$HOME/.cargo/bin:$PATH"

COPY rust-toolchain.toml rust-toolchain.toml

RUN rustup toolchain install

RUN rustup target add $(cat rust_target.txt)

ENV AWS_LC_SYS_USE_SYSTEM=0

COPY crates crates

COPY ./Cargo.toml Cargo.toml

COPY ./Cargo.lock Cargo.lock

RUN cargo install \

--locked \

--version 0.7.4 \

cargo-auditable

RUN case "${TARGETPLATFORM}" in \

"linux/arm64") export JEMALLOC_SYS_WITH_LG_PAGE=16;; \

esac && \

cargo auditable zigbuild --bin uv --bin uvx --target $(cat rust_target.txt) --release

RUN cp target/$(cat rust_target.txt)/release/uv /uv \

&& cp target/$(cat rust_target.txt)/release/uvx /uvx

FROM scratch

COPY --from=build /uv /uvx /

WORKDIR /io

ENTRYPOINT ["/uv"]