update dockerfile

Dockerfile

@@ -1,20 +1,35 @@
 ARG IMG_TAG=latest
 
 # Compile the shentud binary
-FROM golang:1.19-alpine AS shentud-builder
+FROM golang:1.22-alpine AS shentud-builder
 WORKDIR /src/app/
+ENV PACKAGES="curl make git libc-dev bash file gcc linux-headers eudev-dev"
+RUN apk add --no-cache $PACKAGES
+
+# See https://github.com/CosmWasm/wasmvm/releases
+ARG WASMVM_VERSION=v2.1.3
+ADD https://github.com/CosmWasm/wasmvm/releases/download/${WASMVM_VERSION}/libwasmvm_muslc.aarch64.a /lib/libwasmvm_muslc.aarch64.a
+ADD https://github.com/CosmWasm/wasmvm/releases/download/${WASMVM_VERSION}/libwasmvm_muslc.x86_64.a /lib/libwasmvm_muslc.x86_64.a
+RUN sha256sum /lib/libwasmvm_muslc.aarch64.a | grep faea4e15390e046d2ca8441c21a88dba56f9a0363f92c5d94015df0ac6da1f2d
+RUN sha256sum /lib/libwasmvm_muslc.x86_64.a | grep 8dab08434a5fe57a6fbbcb8041794bc3c31846d31f8ff5fb353ee74e0fcd3093
+RUN cp "/lib/libwasmvm_muslc.$(uname -m).a" /lib/libwasmvm_muslc.a
+
 COPY go.mod go.sum* ./
 RUN go mod download
+
 COPY . .
-ENV PACKAGES curl make git libc-dev bash gcc linux-headers eudev-dev python3
-RUN apk add --no-cache $PACKAGES
-RUN CGO_ENABLED=0 make install
+RUN LEDGER_ENABLED=false LINK_STATICALLY=true BUILD_TAGS=muslc make build
+RUN echo "Ensuring binary is statically linked ..."  \
+    && file /src/app/build/gaiad | grep "statically linked" \
 
 # Add to a distroless container
-FROM distroless.dev/static:$IMG_TAG
+FROM alpine:$IMG_TAG
+RUN apk add --no-cache build-base jq
+RUN addgroup -g 1025 nonroot
+RUN adduser -D nonroot -u 1025 -G nonroot
 ARG IMG_TAG
 COPY --from=shentud-builder /go/bin/shentud /usr/local/bin/
 EXPOSE 26656 26657 1317 9090
-USER 0
+USER nonroot
 
 ENTRYPOINT ["shentud", "start"]

Makefile

@@ -158,7 +158,7 @@ endif
 .PHONY: run-tests $(TEST_TARGETS)
 
 docker-build-debug:
-	@docker build -t shentuchain/shentud-e2e --build-arg IMG_TAG=debug -f e2e.Dockerfile .
+	@docker build -t shentuchain/shentud-e2e --build-arg IMG_TAG=debug -f Dockerfile .
 
 # in CI.
 docker-build-hermes: