构建面向Linux/ARM64的.NET 8 AOT Docker镜像遇问题求助

当前Dockerfile可成功构建非AOT的ARM64镜像，但添加/p:PublishAOT=true参数启用AOT发布后，报错：

/usr/bin/ld.bfd: unrecognised emulation mode: aarch64linux

原Dockerfile代码：

# Use a smaller base image for build
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build-env
EXPOSE 8080
EXPOSE 443
EXPOSE 80
WORKDIR /app

# Install clang/zlib1g-dev dependencies for publishing to native
RUN apt-get update \
    && apt-get install -y --no-install-recommends \
    clang zlib1g-dev

# Copy only necessary files for restoring dependencies
COPY *.csproj ./
RUN dotnet restore
COPY . .

FROM --platform=linux/arm64 build-env AS publish
ARG BUILD_CONFIGURATION=Release
RUN dotnet publish "./project.csproj" -c $BUILD_CONFIGURATION -r linux-arm64 -o /app/publish /p:UseAppHost=true

# Use a minimal base image for runtime
#FROM mcr.microsoft.com/dotnet/aspnet:8.0.0-bookworm-slim-arm64v8 AS runtime
FROM mcr.microsoft.com/dotnet/aspnet:8.0.0-cbl-mariner2.0-distroless-arm64v8 AS runtime
WORKDIR /app
EXPOSE 8080
COPY --from=publish /app/publish .
ENTRYPOINT ["./project.dll"]

1. 更换构建阶段的基础镜像 #

原sdk:8.0基于Debian，自带的ld.bfd链接器不支持ARM64 AOT的链接需求，改用基于CBL-Mariner的SDK镜像，它对跨架构AOT编译的支持更完善：

FROM mcr.microsoft.com/dotnet/sdk:8.0-cbl-mariner2.0 AS build-env

2. 调整依赖安装命令 #

CBL-Mariner使用dnf包管理器，替换原apt-get命令安装AOT编译所需依赖：

RUN dnf update -y \
    && dnf install -y clang zlib-devel \
    && dnf clean all

3. 修正发布命令 #

确保启用AOT的参数正确为/p:PublishAOT=true，同时AOT编译后生成的是原生可执行文件，而非.NET DLL：

FROM --platform=linux/arm64 build-env AS publish
ARG BUILD_CONFIGURATION=Release
RUN dotnet publish "./project.csproj" -c $BUILD_CONFIGURATION -r linux-arm64 -o /app/publish /p:PublishAOT=true /p:UseAppHost=true

4. 适配运行时镜像 #

AOT编译后的应用不依赖.NET运行时，改用更轻量的无依赖distroless镜像：

FROM mcr.microsoft.com/dotnet/runtime-deps:8.0-cbl-mariner2.0-distroless-arm64v8 AS runtime
WORKDIR /app
EXPOSE 8080
COPY --from=publish /app/publish .
# 入口改为生成的可执行文件，名称与你的csproj文件名一致
ENTRYPOINT ["./project"]

# 构建阶段：使用CBL-Mariner SDK镜像，适配ARM64 AOT编译
FROM mcr.microsoft.com/dotnet/sdk:8.0-cbl-mariner2.0 AS build-env
WORKDIR /app

# 安装AOT编译必需的工具链依赖
RUN dnf update -y \
    && dnf install -y clang zlib-devel \
    && dnf clean all

# 分层构建：优先还原依赖，提升构建缓存效率
COPY *.csproj ./
RUN dotnet restore
COPY . .

# 发布阶段：指定ARM64架构，启用AOT编译
FROM --platform=linux/arm64 build-env AS publish
ARG BUILD_CONFIGURATION=Release
RUN dotnet publish "./project.csproj" -c $BUILD_CONFIGURATION -r linux-arm64 -o /app/publish /p:PublishAOT=true /p:UseAppHost=true

# 运行阶段：使用无.NET运行时依赖的极简镜像
FROM mcr.microsoft.com/dotnet/runtime-deps:8.0-cbl-mariner2.0-distroless-arm64v8 AS runtime
WORKDIR /app
EXPOSE 8080
COPY --from=publish /app/publish .
# 替换为你的项目生成的可执行文件名
ENTRYPOINT ["./project"]

关键说明 #

• 错误根源：Debian SDK镜像中的ld.bfd链接器不支持ARM64 AOT所需的aarch64linux仿真模式，CBL-Mariner镜像的工具链已内置适配。
• AOT编译后生成原生可执行文件，无需加载DLL，因此入口点必须改为可执行文件名。
• 若在x86_64机器上交叉编译ARM64镜像，需开启Docker Buildx功能，使用命令：docker buildx build --platform linux/arm64 -t your-image-name .

内容的提问来源于stack exchange，提问作者metase