Docker Packaging

Dockerfile

Multi-stage build in Dockerfile:

1. •

   Builder stage (golang base):

   • •Clones bitvora/haven, checks out the TAG arg
   • •Runs go install -v
2. •

   Runtime stage (debian:stable-slim):

   • •Installs curl, gpg, ca-certificates, build-essential, Tor
   • •Copies built Go binary and Haven source from builder
   • •Copies start.sh as entrypoint
   • •Exposes port 3355

Version pinning

ARG TAG=v1.2.0-rc2
ARG COMMIT=986c21b79c93779a449a52f6414ea267c83428bb

To update Haven version: change TAG and COMMIT at the top of the Dockerfile.

compose.yml

Single service haven:

services:
  haven:
    container_name: haven
    image: sudocarlos/haven:main
    build: .
    env_file: .env
    ports:
      - 3355:3355
    volumes:
      - ./data/blossom:/haven/blossom   # Media storage
      - ./data/db:/haven/db             # Database files
      - ./relays_blastr.json:/haven/relays_blastr.json
      - ./relays_import.json:/haven/relays_import.json
      - ./data/tor:/var/lib/tor         # Tor hidden service state
    restart: unless-stopped
    init: true
    deploy:
      resources:
        limits:
          memory: 2GB

Key details

• •init: true ensures proper PID 1 signal handling
• •Memory limit is 2 GB — increase if using lmdb with large datasets
• •All persistent data lives under ./data/ on the host
• •Relay JSON files are bind-mounted directly (not inside data/)

Common Tasks

Rebuild after Dockerfile changes

docker compose build --no-cache
docker compose up -d

View container resource usage

docker stats haven

Testing

Run the full image test suite:

make test

Tests are in tests/test-image.sh (TAP output). They validate:

• •Image builds successfully
• •Required binaries exist (haven, curl, tor, bash)
• •start.sh entrypoint is executable
• •Env validation rejects missing OWNER_NPUB / RELAY_URL
• •Haven process starts and port 3355 responds
• •Docker healthcheck passes
• •Container shuts down gracefully

Tests use .env.test (minimal config) and clean up containers on exit.