First install locally built wheels and then all other dependencies

NOTE: using --no-index to workaround the fact that older versions of pip
used to prefer these local packages rather than downloading them from
the Internet. See pypa/pip#12110

In previous builds pip may have actually downloaded wheels from PyPI
(when they were available) instead of installing the locally built ones
without us even knowing about it!

The fact that the latest xmlsec v1.3.15 is missing it's wheels for
Python 3.11 Linux (as they claim having issues with their build infra
ATM) is just exposing the issue.

Author: atodorov

Dockerfile

@@ -1,4 +1,4 @@
-# Copyright (c) 2017-2024 Alexander Todorov <[email protected]>
+# Copyright (c) 2017-2025 Alexander Todorov <[email protected]>
 #
 # Licensed under GNU Affero General Public License v3 or later (AGPLv3+)
 # https://www.gnu.org/licenses/agpl-3.0.html
@@ -38,7 +38,11 @@ COPY ./etc/*.lua /Kiwi/etc/
 COPY ./bin/* /Kiwi/bin/
 
 COPY ./dist/ /Kiwi/dist/
-RUN pip install --no-cache-dir --find-links /Kiwi/dist/ /Kiwi/dist/kiwitcms_enterprise*.whl
+# install locally built wheels first and then download all other dependencies
+RUN pip install --no-cache-dir --only-binary :all: decorator lxml && \
+    pip install --no-cache-dir --find-links /Kiwi/dist/ --no-index /Kiwi/dist/xmlsec*.whl && \
+    pip install --no-cache-dir --find-links /Kiwi/dist/ --no-index /Kiwi/dist/gssapi*.whl && \
+    pip install --no-cache-dir --find-links /Kiwi/dist/ /Kiwi/dist/kiwitcms_enterprise*.whl
 
 # workaround broken CSS which will break collectstatic
 # because they refer to non-existing ../fonts/glyphicons-halflings-regular.eot (no fonts/ directory)