Axum in docker fails returns 404 but cargo run works fine

[thebetterjort]

• [𝕏] I have looked for existing issues (including closed) about this

Bug Report

I'm not able to access axum server from inside of a docker container.

Version

├── axum v0.7.4
│ ├── axum-core v0.4.3

Platform

Linux f44bf27f15bb 6.6.12-linuxkit #1 SMP Fri Jan 19 08:53:17 UTC 2024 aarch64 GNU/Linux
or M2 Pro
uname -r
23.3.0

Crates

[dependencies]
axum = {version = "0.7.2", features = ["tracing"]}
dotenv = "0.15.0"
tokio = { version = "1.27.0", features = ["full"] }
tower-http = { version = "0.5.0", features = ["cors", "fs"] }
common = {path = "../common"}
tracing = "0.1.40"
tracing-subscriber = { version = "0.3.18", features = ["env-filter"] }
askama = "0.12.1"
rand = "0.8.5"

[dev-dependencies]
anyhow = "1.0.48"
httpc-test = "0.1.1"

Description

main.rs

mod route;

use tracing::info;
use tracing_subscriber::{layer::SubscriberExt, util::SubscriberInitExt};

use axum::http::{
    header::{ACCEPT, AUTHORIZATION, CONTENT_TYPE},
    HeaderValue, Method,
};
// use dotenv::dotenv;
use tower_http::cors::CorsLayer;

#[tokio::main]
async fn main() {
    // Load environment variables from a .env file.
    // dotenv().ok();

    let num = 10;
    println!(
        "Common lib loaded: {num} plus one is {}!",
        common::add_one(num)
    );

    tracing_subscriber::registry()
        .with(
            tracing_subscriber::EnvFilter::try_from_default_env()
                .unwrap_or_else(|_| "web=debug".into()),
        )
        .with(tracing_subscriber::fmt::layer())
        .init();

    info!("hello, web server!");

    // Create a CORS layer to handle Cross-Origin Resource Sharing.
    let cors = CorsLayer::new()
        .allow_origin("http://0.0.0.0:3000".parse::<HeaderValue>().unwrap())
        .allow_methods([Method::GET, Method::POST, Method::PATCH, Method::DELETE])
        .allow_credentials(true)
        .allow_headers([AUTHORIZATION, ACCEPT, CONTENT_TYPE]);
    // Create the application router and attach the CORS layer.
    let app = route::create_index().layer(cors);

    // Bind the server to listen on the specified address and port.
    let listener = tokio::net::TcpListener::bind("0.0.0.0:3000").await.unwrap();
    println!("->> LISTENING on {:?}\n", listener.local_addr());
    // Start serving the application.
    axum::serve(listener, app).await.unwrap();
}

route.rs

use axum::Router;

use tower_http::services::ServeFile;

pub fn create_index() -> Router {
    Router::new().route_service("/", ServeFile::new("dist/index.html"))
}

Dockerfile

ARG PACKAGE=web
FROM rust:1.71.1 as builder
WORKDIR /app

COPY Cargo.toml .
RUN mkdir src && echo "fn main() {}" > src/main.rs
RUN cargo remove common -v
RUN cargo build --release --bin web

COPY src src
RUN touch src/main.rs

RUN cargo add --git https://github.com/federal-courts-software-factory/open-case-filing-system.git common
RUN cargo build --release --bin web

RUN strip target/release/web

FROM gcr.io/distroless/cc-debian12 as release
WORKDIR /app
COPY --from=builder /app/target/release/web .


EXPOSE 3000

CMD ["./web"]

Docker cmd
docker run -p 0.0.0.0:3000:3000 ghcr.io/federal-courts-software-factory/open-case-filing-system/web@sha256:f9aca3996cf60553d26907d3e987ba0fd654011e1b18f3e99078045e99b13215

Docker output:
2024-02-08T05:52:32.006717Z INFO web: hello, web server! ->> LISTENING on Ok(0.0.0.0:3000)

Cargo run works as expected with the index.html being served as expected.

[davidpdrsn]

I'm not very good at docker so I recommend asking in a broader forum. Perhaps https://users.rust-lang.org/

[tyler-harpool]

All Dockerfile's return the same issue.

[tyler-harpool]

Same result:

ARG PACKAGE=web

FROM rust:1.71.0-slim as builder

ARG PACKAGE

WORKDIR /app
RUN apt update && apt install lld clang -y
COPY . .
# cargo vendor and add the toml configuration to config.offline
# We can build if crates.io goes offline.
RUN cargo remove common -v
RUN cargo add --git https://github.com/federal-courts-software-factory/open-case-filing-system.git common

RUN cargo build --release --bin $PACKAGE

FROM debian:bullseye-slim as runtime

ARG PACKAGE
ENV APP=$PACKAGE

WORKDIR /app
# RUN apt-get update -y \
#     && apt-get install -y --no-install-recommends openssl ca-certificates \
#     # Clean up
#     && apt-get autoremove -y \
#     && apt-get clean -y \
#     && rm -rf /var/lib/apt/lists/*

COPY --from=builder /app/target/release/$PACKAGE $PACKAGE


ENTRYPOINT ["./web"]

[tyler-harpool]

Same result:

# Using the `rust-musl-builder` as base image, instead of 
# the official Rust toolchain
FROM clux/muslrust:stable AS chef
USER root
RUN cargo install cargo-chef
WORKDIR /app

FROM chef AS planner
COPY . .
RUN cargo chef prepare --recipe-path recipe.json

FROM chef AS builder
COPY --from=planner /app/recipe.json recipe.json
# Notice that we are specifying the --target flag!
RUN cargo chef cook --release --target x86_64-unknown-linux-musl --recipe-path recipe.json
COPY . .
RUN cargo build --release --target x86_64-unknown-linux-musl --bin docket-api

FROM alpine AS runtime
RUN addgroup -S ocfs && adduser -S ocfs -G ocfs
COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/docket-api /usr/local/bin/
USER ocfs
EXPOSE 9090
CMD ["/usr/local/bin/docket-api"]

[davidpdrsn]

I still recommend you ask somewhere else.

[tyler-harpool]

Does anybody have a dockerfile that can be tested on .7 axum that is working that I might take a look at? So far I have not been able to find much. Deploying to cloud build / cloud run also fails with same 404.

[tyler-harpool]

One last thing I have noticed is that the docker container cannot be killed, it hangs.

[tyler-harpool]

This still doesn't work, does anybody have a working dockerfile that works with axum .7?

Solved by COPY ./dist ./dist

ARG PACKAGE=web

FROM rust:1.71.0-slim as builder

ARG PACKAGE

WORKDIR /app
#RUN apt update && apt install lld clang -y
COPY . .
# cargo vendor and add the toml configuration to config.offline
# We can build if crates.io goes offline.
RUN cargo remove common -v
RUN cargo add --git https://github.com/federal-courts-software-factory/open-case-filing-system.git common

RUN cargo build --release --bin $PACKAGE

FROM debian:bullseye-slim as runtime

ARG PACKAGE
ENV APP=$PACKAGE

WORKDIR /app
# RUN apt-get update -y \
#     && apt-get install -y --no-install-recommends openssl ca-certificates \
#     # Clean up
#     && apt-get autoremove -y \
#     && apt-get clean -y \
#     && rm -rf /var/lib/apt/lists/*
COPY ./dist ./dist
COPY --from=builder /app/target/release/$PACKAGE $PACKAGE


ENTRYPOINT ["./web"]

[tyler-harpool]

https://users.rust-lang.org/t/dockerfile-with-axum-returns-404/106515/2

Not getting any further here.

[FemLolStudio]

Based on the initial post I chenged firstly the dependencies a little bit in the Cargo.toml:

[dependencies]
# ...
# common = {path = "../common"}
common = { git = "https://github.com/federal-courts-software-factory/open-case-filing-system.git" }
# ...

And I used this Dockerfile:

ARG PACKAGE="web"

# Build container
FROM lukemathwalker/cargo-chef:latest-rust-1 AS chef
WORKDIR /build

FROM chef AS planner
COPY . .
RUN cargo chef prepare --recipe-path recipe.json

FROM chef AS builder 
COPY --from=planner /build/recipe.json recipe.json
# Build dependencies - this is the caching Docker layer!
RUN cargo chef cook --release --recipe-path recipe.json
# Build application
ARG PACKAGE
COPY . .
RUN cargo build --release --bin $PACKAGE

# Final image
FROM debian:stable-slim
# installing nativetls dependencies
# RUN apt-get update && \
#    apt-get install -y openssl libssl-dev ca-certificates && \
#    rm -rf /var/lib/apt/lists/*

WORKDIR /app
ARG PACKAGE
COPY --from=builder /build/target/release/$PACKAGE  /app/$PACKAGE
COPY --from=builder /build/dist/                    /app/dist/


# Running
EXPOSE 3000
CMD ["./web"]

This worked for me. The Dockerfile also copy the dist directory, without it no surprise why it sending back 404.

[tyler-harpool]

Thank you! After several days trying to get this going I'm very appreciative.

Here is another solution. Looking to optimize Github Action (docker build times) and image size.

FROM lukemathwalker/cargo-chef:latest-rust-1.70.0 as chef
WORKDIR /app

FROM chef AS planner
COPY .  .
RUN cargo chef prepare --recipe-path recipe.json

FROM chef AS builder
COPY --from=planner /app/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json
COPY . .
RUN cargo build --release

FROM gcr.io/distroless/cc-debian11
COPY --from=builder /app/target/release/docket-api /
COPY --from=builder /app/docket-api/dist /dist
CMD ["./docket-api"]

[ttys3]

the reason is you did not copy your assets files like dist/index.html to docker