golang:1.19-alpine无法拉取最新librdkafka包的构建报错问题

我有一个Kafka消费者Golang应用，正尝试将其部署在PKS集群中，使用的Dockerfile如下：

FROM golang:1.19-alpine as c-bindings

RUN apk update && apk upgrade && apk add pkgconf git bash build-base sudo


FROM c-bindings as app-builder

WORKDIR /go/app


COPY . .

RUN go mod download
RUN go mod verify


RUN apk add librdkafka-dev pkgconf


RUN go build -race -tags dynamic --ldflags "-extldflags -static -s -w" -o main ./main.go

FROM scratch AS app-runner

WORKDIR /go/app/

COPY --from=app-builder /go/app/main ./main


CMD ["/go/app/main"]

为了支持GSSAPI作为SASL机制，我添加了RUN apk add librdkafka-dev pkgconf指令，但构建镜像时出现报错：

ERROR [app-builder 6/6] RUN go build -race -tags dynamic --ldflags "-extldflags -static -s -w" -o main ./main.go                                                                                                                                    9.9s
------ [app-builder 6/6] RUN go build -race -tags dynamic --ldflags "-extldflags -static -s -w" -o main ./main.go:
#13 4.598 # github.com/confluentinc/confluent-kafka-go/kafka
#13 4.598 ../pkg/mod/github.com/confluentinc/confluent-kafka-go@v1.9.2/kafka/00version.go:44:2: error: #error "confluent-kafka-go requires librdkafka v1.9.0 or later. Install the latest version of librdkafka from the Confluent repositories, see http://docs.confluent.io/current/installation.html"
#13 4.598    44 | #error "confluent-kafka-go requires librdkafka v1.9.0 or later. Install the latest version of librdkafka from the Confluent repositories, see http://docs.confluent.io/current/installation.html"
#13 4.598       |  ^~~~~
------ executor failed running [/bin/sh -c go build -race -tags dynamic --ldflags "-extldflags -static -s -w" -o main ./main.go]: exit code: 2

显然Alpine官方源里的librdkafka版本达不到confluent-kafka-go v1.9.2要求的v1.9.0+，请问该怎么解决？

Alpine官方软件源中的librdkafka版本通常偏旧，无法满足confluent-kafka-go的版本要求，需要添加Confluent官方的Alpine软件源来获取符合版本要求的librdkafka包，同时还要安装GSSAPI相关依赖以支持SASL机制。修改后的Dockerfile如下：

FROM golang:1.19-alpine as c-bindings

# 添加Confluent官方源并安装基础依赖
RUN apk update && apk upgrade && \
    apk add --no-cache pkgconf git bash build-base sudo curl && \
    # 添加Confluent的GPG密钥
    curl -L https://packages.confluent.io/deb/7.2/archive.key | apk add --no-cache --virtual .confluent-keyring - && \
    # 添加Confluent Alpine源
    echo "https://packages.confluent.io/apk/7.2/main" >> /etc/apk/repositories

FROM c-bindings as app-builder

WORKDIR /go/app

COPY . .

RUN go mod download && go mod verify

# 安装符合版本要求的librdkafka-dev及GSSAPI依赖
RUN apk add librdkafka-dev pkgconf krb5-dev

# 调整构建参数：-race和静态编译不兼容，移除-race；同时确保动态链接librdkafka
RUN go build -tags dynamic --ldflags "-s -w" -o main ./main.go

FROM alpine:3.17 AS app-runner

WORKDIR /go/app/

# 复制编译好的二进制文件，同时复制运行时依赖的librdkafka和krb5库
COPY --from=app-builder /go/app/main ./main
COPY --from=app-builder /usr/lib/librdkafka.so.1 /usr/lib/
COPY --from=app-builder /usr/lib/libkrb5.so.3 /usr/lib/
COPY --from=app-builder /usr/lib/libk5crypto.so.3 /usr/lib/
COPY --from=app-builder /usr/lib/libkrb5support.so.0 /usr/lib/
COPY --from=app-builder /usr/lib/libcom_err.so.2 /usr/lib/

CMD ["/go/app/main"]

关键修改点说明：

• 添加Confluent官方的Alpine软件源，确保能拉取到符合版本要求的librdkafka-dev包
• 移除-race编译参数：Go的race检测和静态编译不兼容，且scratch镜像无法支持race检测的运行时依赖
• 替换scratch为alpine:3.17基础镜像：scratch是完全空镜像，无法提供librdkafka和GSSAPI的运行时依赖，轻量的Alpine镜像可保证运行环境完整
• 安装krb5-dev等GSSAPI相关依赖，确保SASL GSSAPI认证功能正常工作
• 复制运行时必需的动态库到最终镜像中

内容的提问来源于stack exchange，提问作者Pramit Pakhira