|
| 1 | +# pull python image |
| 2 | +FROM python:3.12-slim as base-stage |
| 3 | + |
| 4 | +# set working directory |
| 5 | +WORKDIR /app |
| 6 | + |
| 7 | +# set python environment |
| 8 | +ENV PYTHONDONTWRITEBYTECODE=1 \ |
| 9 | + PYTHONUNBUFFERED=1 \ |
| 10 | + PYTHONPATH=/ |
| 11 | + |
| 12 | +# set environment variables |
| 13 | +ARG ENVIRONMENT=prod |
| 14 | +ENV ENVIRONMENT=${ENVIRONMENT} |
| 15 | + |
| 16 | +# set virtual environment |
| 17 | +ENV VIRTUAL_ENV=/venv |
| 18 | +RUN python3 -m venv ${VIRTUAL_ENV} |
| 19 | +ENV PATH="${VIRTUAL_ENV}/bin:$PATH" |
| 20 | + |
| 21 | +# specify location out of app dir so no override on copy |
| 22 | +ENV PLAYWRIGHT_BROWSERS_PATH=/temp/ms-playwright |
| 23 | + |
| 24 | +# install system dependencies |
| 25 | +RUN apt-get -y update \ |
| 26 | + && apt-get -y upgrade \ |
| 27 | + # && apt-get -y install netcat gcc postgresql \ |
| 28 | + # && apt-get -y install gcc \ |
| 29 | + && apt-get clean |
| 30 | + |
| 31 | +# use base-stage for build |
| 32 | +FROM base-stage as builder-stage |
| 33 | + |
| 34 | +# prevent poetry virtual environment |
| 35 | +ENV POETRY_VIRTUALENVS_CREATE false |
| 36 | + |
| 37 | +# # copy in local packages for installation |
| 38 | +# COPY ./local_package /app/local_package |
| 39 | + |
| 40 | +# install python dependencies |
| 41 | +RUN pip install --upgrade pip \ |
| 42 | + && pip install --no-cache-dir poetry |
| 43 | +COPY ./src/pyproject.toml ./src/poetry.lock ./ |
| 44 | +RUN bash -c "if [ ${ENVIRONMENT} == 'dev' ] || [ ${ENVIRONMENT} == 'proxy' ] ; \ |
| 45 | + then . /venv/bin/activate && poetry install --no-root --no-interaction; \ |
| 46 | + else . /venv/bin/activate && poetry install --no-root --no-interaction --no-ansi --only main; fi" |
| 47 | + |
| 48 | +# lint and stop build if fail for CI/CD |
| 49 | +# COPY . . |
| 50 | +# RUN pip install black flake8 isort |
| 51 | +# RUN flake8 . |
| 52 | +# RUN black . |
| 53 | +# RUN isort . |
| 54 | + |
| 55 | +# use base-stage for final-stage image |
| 56 | +FROM base-stage as final-stage |
| 57 | + |
| 58 | +# copy built venv folder |
| 59 | +COPY --from=builder-stage /venv /venv |
| 60 | + |
| 61 | +# copy src to app folder |
| 62 | +COPY ./src/app . |
| 63 | + |
| 64 | +# Install playwrite dependencies |
| 65 | +RUN playwright install --with-deps chromium |
| 66 | + |
| 67 | +# use a non-root user |
| 68 | +RUN addgroup --system school && adduser --system --ingroup school fish |
| 69 | +RUN chown -R fish:school /app |
| 70 | +USER fish |
| 71 | + |
| 72 | +# start the worker |
| 73 | +CMD uvicorn main:app --workers 1 --host 0.0.0.0 --port ${PORT-8080} --log-level info |
| 74 | + |
| 75 | +# keep container alive for inspection |
| 76 | +# CMD sh -c "while true; do sleep 1; done" |
0 commit comments