gitleaks_demo/Dockerfile at main · pythoninthegrasses/gitleaks_demo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
# using ubuntu LTS version
FROM ubuntu:20.04 AS builder-image

# avoid stuck build due to user prompt
ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update \
    && apt-get install \
    --no-install-recommends -y \
    aptitude \
    autoconf \
    automake \
    build-essential \
    ca-certificates \
    curl \
    git \
    locales \
    libffi-dev \
    libncurses-dev \
    libreadline-dev \
    libssl-dev \
    libtool \
    libxslt-dev \
    libyaml-dev \
    python3 \
    python3-dev \
    python3-pip \
    unixodbc-dev \
    unzip \
    && rm -rf /var/lib/apt/lists/*

# Set locale
RUN locale-gen en_US.UTF-8
ENV LANG=en_US.UTF-8
ENV LANGUAGE=en_US:en
ENV LC_ALL=en_US.UTF-8

ARG USERNAME=appuser
ENV HOME="/home/${USERNAME}"
ENV PATH="$HOME/.asdf/bin:$HOME/.asdf/shims:$PATH"

RUN useradd --create-home $USERNAME

# install asdf then python latest
RUN bash -c "git clone --depth 1 https://github.com/asdf-vm/asdf.git $HOME/.asdf \
    && echo '. $HOME/.asdf/asdf.sh' >> $HOME/.bashrc  \
    && echo '. $HOME/.asdf/asdf.sh' >> $HOME/.profile"
RUN asdf plugin-add python \
    && asdf install python 3.10.5 \
    && asdf global python 3.10.5

ENV POETRY_HOME="$HOME/.poetry"
RUN curl -sSL https://install.python-poetry.org | python3.10 -
ENV PATH "${POETRY_HOME}/bin:$PATH"

WORKDIR /app
COPY pyproject.toml poetry.lock ./
RUN python3.10 -m venv /opt/venv

# Install pip requirements
RUN . /opt/venv/bin/activate && poetry install

FROM ubuntu:20.04 AS runner-image

ARG USERNAME=appuser
ENV HOME="/home/${USERNAME}"
ENV VIRTUAL_ENV="/opt/venv"
ENV PATH="${VIRTUAL_ENV}/bin:$HOME/.asdf/bin:$HOME/.asdf/shims:$PATH"

RUN useradd --create-home $USERNAME \
    && mkdir -p /home/${USERNAME}/app

COPY --chown=${USERNAME}:${USERNAME} . $HOME/app
COPY --from=builder-image --chown=${USERNAME}:${USERNAME} /opt/venv /opt/venv
COPY --from=builder-image --chown=${USERNAME}:${USERNAME} $HOME/.asdf $HOME/.asdf

# avoid stuck build due to user prompt
ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update \
    && apt-get install \
    --no-install-recommends -y \
    ca-certificates \
    curl \
    git \
    && rm -rf /var/lib/apt/lists/*

# Keeps Python from generating .pyc files in the container
ENV PYTHONDONTWRITEBYTECODE=1

# Turns off buffering for easier container logging
ENV PYTHONUNBUFFERED=1

# activate virtual environment
RUN python -m venv $VIRTUAL_ENV

USER appuser

WORKDIR $HOME/app

ENTRYPOINT ["python", "demo.py"]
# CMD ["/bin/bash"]