Add dockerfile for automated mentoring support (#12)

Fixes #7

Some info about the choices made:

* node version: lts
* decided to run the analyzer as an unprivileged user
* apk update to make the build with the latest dependencies and security fixes
* two phase build, copying node_modules after yarn install --prod, to keep only runtime needed dependencies
* Added certificates because it couldn't be bad
* I changed /bin/bash to /bin/sh in the analyze.sh file since bash is not present in linux-alpine, probably it could be #!/usr/bin/env sh

Author: depsir

.dockerignore

@@ -0,0 +1,4 @@
+test
+dist
+node_modules
+.git

Dockerfile

@@ -0,0 +1,25 @@
+FROM node:lts-alpine as builder
+
+# Install SSL ca certificates
+RUN apk update && apk add ca-certificates
+
+# Create appuser
+RUN adduser -D -g '' appuser
+
+# get the source code
+WORKDIR /javascript-analyzer
+COPY . .
+
+# build
+RUN yarn install && yarn build && yarn install --prod
+
+# Build a minimal and secured container
+FROM node:lts-alpine
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=builder /etc/passwd /etc/passwd
+COPY --from=builder /javascript-analyzer/bin /opt/analyzer/bin
+COPY --from=builder /javascript-analyzer/dist /opt/analyzer/dist
+COPY --from=builder /javascript-analyzer/node_modules /opt/analyzer/node_modules
+USER appuser
+WORKDIR /opt/analyzer
+ENTRYPOINT ["/opt/analyzer/bin/analyze.sh"]

README.md

@@ -27,3 +27,23 @@ Or directly via the provided shell script:
 ```
 
 Add the `--debug` and `--console` flags to get output in the terminal window.
+
+## Usage with docker
+
+To create the image, execute the following command from the repository root:
+
+```bash
+docker build -t exercism/javascript-analyzer .
+```
+
+To `run` from docker pass in the solutions path as a volume and execute with the necessary parameters:
+
+```bash
+docker run -v $(PATH_TO_SOLUTION):/solution exercism/javascript-analyzer ${SLUG} /solution
+```
+
+Example:
+
+```bash
+docker run -v ~/solution-238382y7sds7fsadfasj23j:/solution exercism/javascript-analyzer two-fer /solution
+```

bin/analyze.sh

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/bin/sh
 
 # Usage:
 # ./bin/analyze.sh two_fer ~/test/