Add python libraries in a separate conda env

pantherman594 · pantherman594 · commit c1c94feb6116 · 2026-03-04T10:28:19.000-05:00
diff --git a/features/src/workbench-tools/devcontainer-feature.json b/features/src/workbench-tools/devcontainer-feature.json
@@ -4,6 +4,16 @@
   "name": "Workbench Tools",
   "description": "Installs common tools for Workbench Apps. Currently it only supports Debian-based systems (e.g. Ubuntu) on x86_64.",
   "options": {
+      "libEnv": {
+          "type": "string",
+          "default": "/opt/conda/envs/workbench-ds",
+          "description": "The path to the conda environment where Python libraries (e.g. numpy, plotly, scipy) should be installed. This could be a pre-existing environment or a new one."
+      },
+      "libPythonVersion": {
+          "type": "string",
+          "default": "3.10",
+          "description": "The Python version to use for the installed libraries."
+      },
       "cloud": {
           "type": "string",
           "default": "",
diff --git a/features/src/workbench-tools/install-conda.sh b/features/src/workbench-tools/install-conda.sh
@@ -19,7 +19,6 @@ install_miniforge() {
     local download_url
     download_url="https://github.com/conda-forge/miniforge/releases/latest/download/Miniforge3-Linux-$(uname -m).sh"
 
-    check_packages curl ca-certificates
     mkdir -p /tmp/miniforge
     (
         cd /tmp/miniforge
diff --git a/features/src/workbench-tools/install.sh b/features/src/workbench-tools/install.sh
@@ -10,6 +10,8 @@ set -o xtrace
 
 readonly CLOUD="${CLOUD:-""}"
 readonly USERNAME="${USERNAME:-"root"}"
+readonly LIB_ENV="${LIBENV:-"/opt/conda/envs/workbench-ds"}"
+readonly LIB_PYTHON_VERSION="${LIBPYTHONVERSION:-"3.10"}"
 USER_HOME_DIR="${USERHOMEDIR:-"/home/${USERNAME}"}"
 if [[ "${USER_HOME_DIR}" == "/home/root" ]]; then
     USER_HOME_DIR="/root"
@@ -27,6 +29,10 @@ readonly WORKBENCH_TOOLS_DIR="/opt/workbench-tools"
 function cleanup() {
     rm -rf "${WORKDIR:?}"
     rm -rf /var/lib/apt/lists/*
+    # Clean up micromamba caches to save image space
+    if command -v micromamba &> /dev/null; then
+        micromamba clean --all --yes
+    fi
 }
 
 trap 'cleanup' EXIT
@@ -68,32 +74,73 @@ if ! mamba --version &>/dev/null; then
 fi
 
 # Install the samtools family of tools in a separate environment since some of
-# the other tools depend on old versions of these. This will take priority in
-# the PATH.
+# the other tools depend on old versions of these.
 CONDA_PACKAGES_1=(
-    "bcftools"
-    "htslib" # includes bgzip and tabix
-    "samtools"
+    "bioconda::bcftools"
+    "bioconda::htslib" # includes bgzip and tabix
+    "bioconda::samtools"
 )
 
+# Environment 2 contains the genomics CLI tools. They will be added to the
+# PATH but will not be usable as Python libraries.
 CONDA_PACKAGES_2=(
-    "python=3.9"
-    "pip"
-    "perl==5.32.1"
-    "bedtools"
+    "conda-forge::python=3.10"
+    "conda-forge::pip"
+    "conda-forge::perl==5.32.1"
+    "bioconda::bedtools"
     "conda-forge::bgenix"
     "conda-forge::cromwell"
-    "ensembl-vep>=115.1"
-    "nextflow"
-    "plink"
-    "plink2"
-    "regenie"
-    "vcftools"
+    "bioconda::ensembl-vep>=115.1"
+    "bioconda::nextflow"
+    "bioconda::plink"
+    "bioconda::plink2"
+    "bioconda::regenie"
+    "bioconda::vcftools"
+)
+
+# Environment 3 contains data science Python libraries. These should be
+# accessible from the user's default Python environment, which is why we install
+# them separately and give the user control over whether to inject them into an
+# existing environment or create a new one.
+CONDA_PACKAGES_3=(
+    "conda-forge::python=${LIB_PYTHON_VERSION}"
+    "conda-forge::google-cloud-storage"
+    "conda-forge::ipykernel"
+    "conda-forge::ipywidgets"
+    "conda-forge::jupyter"
+    "conda-forge::openai"
+    "conda-forge::matplotlib"
+    "conda-forge::numpy"
+    "conda-forge::plotly"
+    "conda-forge::pandas"
+    "conda-forge::seaborn"
+    "conda-forge::scikit-learn"
+    "conda-forge::scipy"
+    "conda-forge::tqdm"
 )
 
+# Build isolated environments
 mkdir -p "${WORKBENCH_TOOLS_DIR}"
-mamba create --prefix "${WORKBENCH_TOOLS_DIR}/1" -c bioconda -y "${CONDA_PACKAGES_1[@]}"
-mamba create --prefix "${WORKBENCH_TOOLS_DIR}/2" -c bioconda -y "${CONDA_PACKAGES_2[@]}"
+echo "Building Environment 1 (Samtools family)..."
+mamba create --prefix "${WORKBENCH_TOOLS_DIR}/1" -y "${CONDA_PACKAGES_1[@]}"
+
+echo "Building Environment 2 (Genomics CLI Tools)..."
+mamba create --prefix "${WORKBENCH_TOOLS_DIR}/2" -y "${CONDA_PACKAGES_2[@]}"
+
+echo "Building Environment 3 (Python Libraries)..."
+LIB_ENV_EXISTS=0
+
+if [ -d "${LIB_ENV}" ]; then
+    # SCENARIO A: Target environment already exists on host. Inject packages into it.
+    LIB_ENV_EXISTS=1
+    echo "Host environment detected at ${LIB_ENV}. Injecting data science packages..."
+    mamba install --prefix "${LIB_ENV}" -y "${CONDA_PACKAGES_3[@]}"
+else
+    # SCENARIO B: Target environment does not exist. Create it from scratch.
+    echo "No host environment found. Creating standalone environment at ${LIB_ENV}..."
+    mkdir -p "$(dirname "${LIB_ENV}")"
+    mamba create --prefix "${LIB_ENV}" -y "${CONDA_PACKAGES_3[@]}"
+fi
 
 # Install dsub via pip if on GCP. The conda version is outdated.
 if [[ "${CLOUD}" == "gcp" ]]; then
@@ -106,28 +153,32 @@ find -L "${WORKBENCH_TOOLS_DIR}/2/bin" -type f -executable -exec \
         -e "1s|^#\!/usr/bin/env perl\\r\?$|#\!${WORKBENCH_TOOLS_DIR}/2/bin/perl|" \
         -e "1s|^#\!/usr/bin/env python\\r\?$|#\!${WORKBENCH_TOOLS_DIR}/2/bin/python|" {} \;
 
-# Make the login user the owner of the conda environment
+# Make the login user the owner of the conda environments
 chown -R "${USERNAME}:" "${WORKBENCH_TOOLS_DIR}"
+chown -R "${USERNAME}:" "${LIB_ENV}"
 
 {
+    echo "# Workbench Tools Configuration"
+    
+    # If we created a standalone Python libraries environment from scratch, make it the default terminal Python.
+    # If it already existed (LIB_ENV_EXISTS=1), we leave the host image's PATH untouched to prevent shadowing.
+    if [[ "${LIB_ENV_EXISTS}" == "0" ]]; then
+        # shellcheck disable=SC2016 # we want $PATH to be evaluated at runtime
+        printf 'export PATH="%s/bin:$PATH"\n' "${LIB_ENV}"
+    fi
+    
     # Set PATH to include workbench-tools binaries
     # shellcheck disable=SC2016 # we want $PATH to be evaluated at runtime
-    printf 'export PATH="%s:$PATH"\n' "${WORKBENCH_TOOLS_DIR}/1/bin:${WORKBENCH_TOOLS_DIR}/2/bin"
+    printf 'export PATH="$PATH:%s"\n' "${WORKBENCH_TOOLS_DIR}/1/bin:${WORKBENCH_TOOLS_DIR}/2/bin"
 
     # Set CROMWELL_JAR environment variable
     printf 'export CROMWELL_JAR="%s"\n' "${WORKBENCH_TOOLS_DIR}/2/share/cromwell/cromwell.jar"
-
-    # Make dsub a function that includes the correct PYTHONPATH. NeMo sets
-    # PYTHONPATH so we need to override it here. We use a function instead of an
-    # alias because aliases are not expanded in non-interactive shells.
-    # shellcheck disable=SC2016 # we want $PYTHONPATH to be evaluated at runtime
-    printf 'function dsub() (PYTHONPATH="%s/2/lib/python3.9/site-packages:${PYTHONPATH:-}" "%s/2/bin/dsub" "$@")\n' "${WORKBENCH_TOOLS_DIR}" "${WORKBENCH_TOOLS_DIR}" 
 } >> "${USER_HOME_DIR}/.bashrc"
 
 # Allow .bashrc to be sourced in non-interactive shells
 sed -i '/^# If not running interactively/,/esac/d' "${USER_HOME_DIR}/.bashrc" || true
 
 # Make sure the login user is the owner of their .bashrc
-chown -R "${USERNAME}:" "${USER_HOME_DIR}/.bashrc"
+chown "${USERNAME}:" "${USER_HOME_DIR}/.bashrc"
 
-echo "Done!"
+echo "Workbench tools installation complete!"
diff --git a/src/custom-workbench-jupyter-template/.devcontainer.json b/src/custom-workbench-jupyter-template/.devcontainer.json
@@ -22,6 +22,8 @@
   ],
   "features": {
     "./.devcontainer/features/workbench-tools": {
+      "libEnv": "/opt/conda/envs/jupyter", // Use the jupyter conda environment
+      "libPythonVersion": "3.10", // This needs to match the Python version in the Dockerfile
       "cloud": "${templateOption:cloud}",
       "username": "jupyter",
       "userHomeDir": "/home/jupyter"
diff --git a/src/jupyter-aou/.devcontainer.json b/src/jupyter-aou/.devcontainer.json
@@ -11,6 +11,8 @@
   "postStartCommand": "./startupscript/remount-on-restart.sh jupyter /home/jupyter \"${templateOption:cloud}\" \"${templateOption:login}\"",
   "features": {
     "./.devcontainer/features/workbench-tools": {
+      "libEnv": "/opt/conda/envs/jupyter", // Use the jupyter conda environment
+      "libPythonVersion": "3.10", // This needs to match the Python version in the Dockerfile
       "cloud": "${templateOption:cloud}",
       "username": "jupyter",
       "userHomeDir": "/home/jupyter"
diff --git a/startupscript/post-startup.sh b/startupscript/post-startup.sh
@@ -172,7 +172,7 @@ cat << EOF >> "${USER_BASHRC}"
 ### BEGIN: Workbench-specific customizations ###
 
 # Prepend "/usr/bin" (if not already in the path)
-if [[ "\${PATH}:" != "/usr/bin:"* ]]; then
+if [[ ":\${PATH}:" != *":/usr/bin:"* ]]; then
   export PATH=/usr/bin:\${PATH}
 fi
 
diff --git a/test/test.sh b/test/test.sh
@@ -44,6 +44,21 @@ if [[ "$HAS_WORKBENCH_TOOLS" == "true" ]]; then
     check "vep: filter_vep" "filter_vep --help > /dev/null"
     check "vep: variant_recoder" "variant_recoder --help | head -n10"
     check "vep: haplo" "haplo --help | head -n10"
+
+    # Python packages
+    check "python: google-cloud-storage" 'python3 -c "import google.cloud.storage"'
+    check "python: ipykernel" 'python3 -c "import ipykernel"'
+    check "python: ipywidgets" 'python3 -c "import ipywidgets"'
+    check "python: jupyter" 'python3 -c "import jupyter"'
+    check "python: openai" 'python3 -c "import openai"'
+    check "python: matplotlib" 'python3 -c "import matplotlib"'
+    check "python: numpy" 'python3 -c "import numpy"'
+    check "python: plotly" 'python3 -c "import plotly"'
+    check "python: pandas" 'python3 -c "import pandas"'
+    check "python: seaborn" 'python3 -c "import seaborn"'
+    check "python: scikit-learn" 'python3 -c "import sklearn"'
+    check "python: scipy" 'python3 -c "import scipy"'
+    check "python: tqdm" 'python3 -c "import tqdm"'
 fi
 
 # The postgres-client feature should install these

Original file line number	Diff line number	Diff line change
`@@ -19,7 +19,6 @@ install_miniforge() {`
`19`	`19`	`local download_url`
`20`	`20`	`download_url="https://github.com/conda-forge/miniforge/releases/latest/download/Miniforge3-Linux-$(uname -m).sh"`
`21`	`21`
`22`		`- check_packages curl ca-certificates`
`23`	`22`	`mkdir -p /tmp/miniforge`
`24`	`23`	`(`
`25`	`24`	`cd /tmp/miniforge`