Dockerfiles + compose: perf(docker): faster image builds and container startup

Author: chetanr25

docker/dev/Dockerfile

@@ -3,21 +3,30 @@ FROM python:3.11-slim
 
 WORKDIR /app
 
-# Use apt cache mount to speed up system package installation across builds
+# apt cache mounts keep downloaded .debs across builds
 RUN rm -f /etc/apt/apt.conf.d/docker-clean; echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt \
     apt-get update && apt-get install -y \
     curl \
     libgl1 \
     libglib2.0-0 \
-    libxcb1
+    libxcb1 \
+    libpq-dev \
+    build-essential \
+    g++
+
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
 
 COPY requirements.txt .
 
-# Use pip cache mount so it remembers downloaded wheels
-RUN --mount=type=cache,target=/root/.cache/pip \
-    pip install -r requirements.txt
+RUN --mount=type=cache,target=/root/.cache/uv \
+    UV_TORCH_BACKEND=cpu \
+    uv pip install --system -r requirements.txt
+
+# Bake a hash of the deps the image was built with. The entrypoint compares this
+# against the live (bind-mounted) requirements.txt to decide whether to reinstall.
+RUN sha256sum requirements.txt | cut -d' ' -f1 > /opt/req_hash
 
 ENV PYTHONPATH=/app
 

docker/dev/compose.yml

@@ -17,6 +17,8 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 30s
+      start_interval: 1s
 
   ollama:
     image: ollama/ollama:latest
@@ -33,6 +35,7 @@ services:
       timeout: 5s
       retries: 5
       start_period: 30s
+      start_interval: 2s
 
   whisper:
     image: onerahmet/openai-whisper-asr-webservice:latest
@@ -53,6 +56,7 @@ services:
       timeout: 5s
       retries: 5
       start_period: 60s
+      start_interval: 3s
 
   app:
     build:

docker/prod/Dockerfile

@@ -1,32 +1,44 @@
+# ---- builder ----
 FROM python:3.11-slim AS builder
 
-WORKDIR /build
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential g++ libpq-dev && \
+    rm -rf /var/lib/apt/lists/*
+
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
 
+WORKDIR /build
 COPY requirements.txt .
-RUN pip install --no-cache-dir --prefix=/install -r requirements.txt
 
+RUN --mount=type=cache,target=/root/.cache/uv \
+    UV_TORCH_BACKEND=cpu \
+    uv pip install --system -r requirements.txt
 
+# ---- runtime ----
 FROM python:3.11-slim
 
 WORKDIR /app
 
-RUN apt-get update && apt-get install -y \
+RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     libgl1 \
     libglib2.0-0 \
     libxcb1 \
-    && rm -rf /var/lib/apt/lists/*
+    libpq5 && \
+    rm -rf /var/lib/apt/lists/*
 
-COPY --from=builder /install /usr/local
+COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
 
-# Copy only app code, not data/ temp/ tests/ docs/ etc.
 COPY app/ ./app/
 COPY requirements.txt .
 COPY docker/entrypoint.sh /entrypoint.sh
 
+# Bake deps hash so the entrypoint can skip the redundant install when unchanged.
+RUN sha256sum requirements.txt | cut -d' ' -f1 > /opt/req_hash
+
 ENV PYTHONPATH=/app
 
-# Data dirs created here; actual storage comes from mounted volumes at runtime.
 RUN mkdir -p /data/db /data/uploads && chmod +x /entrypoint.sh
 
 EXPOSE 8000