-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDockerfile.dev
92 lines (66 loc) · 2.27 KB
/
Dockerfile.dev
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
# syntax=docker/dockerfile:1.7.0
ARG PYTHON_VERSION=3.11
FROM ghcr.io/astral-sh/uv:python${PYTHON_VERSION}-bookworm-slim as builder
ENV UV_COMPILE_BYTECODE=1 UV_LINK_MODE=copy
# Configure the Python directory so it is consistent
ENV UV_PYTHON_INSTALL_DIR /python
# Only use the managed Python version
ENV UV_PYTHON_PREFERENCE=only-managed
# Install Python before the project for caching
RUN uv python install "$PYTHON_VERSION"
WORKDIR /app
COPY pyproject.toml .
# venv
ARG UV_PROJECT_ENVIRONMENT="/opt/venv"
ENV VENV="${UV_PROJECT_ENVIRONMENT}"
ENV PATH="$VENV/bin:$PATH"
RUN uv venv $UV_PROJECT_ENVIRONMENT \
&& uv pip install -r pyproject.toml --all-extras
FROM python:${PYTHON_VERSION}-slim-bookworm as deps
# avoid stuck build due to user prompt
ARG DEBIAN_FRONTEND=noninteractive
# install dependencies
RUN apt-get -qq update \
&& apt-get -qq install \
--no-install-recommends -y \
curl \
sudo \
tzdata \
&& rm -rf /var/lib/apt/lists/*
FROM deps as runner
# set timezone
ENV TZ=${TZ:-"America/Chicago"}
RUN ln -snf "/usr/share/zoneinfo/${TZ}" /etc/localtime && echo "$TZ" > /etc/timezone
# setup standard non-root user for use downstream
ENV USER_NAME=appuser
ARG VENV="/opt/venv"
ENV PATH="${VENV}/bin:${HOME}/.local/bin:$PATH"
# standardise on locale, don't generate .pyc, enable tracebacks on seg faults
ENV LANG C.UTF-8
ENV LC_ALL C.UTF-8
ENV PYTHONDONTWRITEBYTECODE 1
ENV PYTHONFAULTHANDLER 1
# add non-root user with sudo privileges
ARG UID=10001
RUN adduser \
--disabled-password \
--gecos "" \
--home "/home/${USER_NAME}" \
--shell "/bin/bash" \
--uid "${UID}" \
${USER_NAME} \
&& echo "${USER_NAME} ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/${USER_NAME} \
&& chmod 0440 /etc/sudoers.d/${USER_NAME}
USER ${USER_NAME}
WORKDIR /home/${USER_NAME}
# Copy the Python version
COPY --from=builder --chown=${USER_NAME}:${USER_NAME} /python /python
WORKDIR /app
# Copy venv first (has better caching properties)
COPY --from=builder --chown=${USER_NAME} "$VENV" "$VENV"
# Copy application code last
COPY --chown=${USER_NAME} ./app .
CMD [ "sleep", "infinity" ]
LABEL org.opencontainers.image.title="meetup_bot"
LABEL org.opencontainers.image.version="dev"
LABEL org.opencontainers.image.description="meetup_bot image for development"