|
| 1 | +# SOURCES |
| 2 | +# https://denisbrogg.hashnode.dev/efficient-python-docker-image-from-any-poetry-project |
| 3 | +# https://binx.io/2022/06/13/poetry-docker/ |
| 4 | +# https://github.com/python-poetry/poetry/discussions/1879#discussioncomment-216865 |
| 5 | + |
| 6 | +# full semver just for python base image |
| 7 | +ARG PYTHON_VERSION=3.11.3 |
| 8 | + |
| 9 | +FROM python:${PYTHON_VERSION}-slim-bullseye AS builder |
| 10 | + |
| 11 | +# avoid stuck build due to user prompt |
| 12 | +ARG DEBIAN_FRONTEND=noninteractive |
| 13 | + |
| 14 | +# install dependencies |
| 15 | +RUN apt -qq update \ |
| 16 | + && apt -qq install \ |
| 17 | + --no-install-recommends -y \ |
| 18 | + curl \ |
| 19 | + gcc \ |
| 20 | + libpq-dev \ |
| 21 | + python3-dev \ |
| 22 | + && rm -rf /var/lib/apt/lists/* |
| 23 | + |
| 24 | +# pip env vars |
| 25 | +ENV PIP_NO_CACHE_DIR=off |
| 26 | +ENV PIP_DISABLE_PIP_VERSION_CHECK=on |
| 27 | +ENV PIP_DEFAULT_TIMEOUT=100 |
| 28 | + |
| 29 | +# path |
| 30 | +ENV VENV="/opt/venv" |
| 31 | +ENV PATH="$VENV/bin:$PATH" |
| 32 | + |
| 33 | +WORKDIR /app |
| 34 | +COPY . . |
| 35 | + |
| 36 | +RUN python -m venv $VENV \ |
| 37 | + && . "${VENV}/bin/activate" \ |
| 38 | + && python -m pip install -r requirements.txt |
| 39 | + |
| 40 | +FROM python:${PYTHON_VERSION}-slim-bullseye AS runner |
| 41 | + |
| 42 | +# setup standard non-root user for use downstream |
| 43 | +ENV USER_NAME=appuser |
| 44 | +ENV USER_GROUP=appuser |
| 45 | +ENV HOME="/home/${USER_NAME}" |
| 46 | +ENV HOSTNAME="${HOST:-localhost}" |
| 47 | +ENV VENV="/opt/venv" |
| 48 | + |
| 49 | +ENV PATH="${VENV}/bin:${VENV}/lib/python${PYTHON_VERSION}/site-packages:/usr/local/bin:${HOME}/.local/bin:/bin:/usr/bin:/usr/share/doc:$PATH" |
| 50 | + |
| 51 | +# standardise on locale, don't generate .pyc, enable tracebacks on seg faults |
| 52 | +ENV LANG C.UTF-8 |
| 53 | +ENV LC_ALL C.UTF-8 |
| 54 | +ENV PYTHONDONTWRITEBYTECODE 1 |
| 55 | +ENV PYTHONFAULTHANDLER 1 |
| 56 | + |
| 57 | +RUN groupadd ${USER_NAME} \ |
| 58 | + && useradd -m ${USER_NAME} -g ${USER_GROUP} |
| 59 | + |
| 60 | +# avoid stuck build due to user prompt |
| 61 | +ARG DEBIAN_FRONTEND=noninteractive |
| 62 | + |
| 63 | +# install dependencies |
| 64 | +RUN apt -qq update \ |
| 65 | + && apt -qq install \ |
| 66 | + --no-install-recommends -y \ |
| 67 | + curl \ |
| 68 | + lsof \ |
| 69 | + && rm -rf /var/lib/apt/lists/* |
| 70 | + |
| 71 | +WORKDIR /app |
| 72 | +COPY --chown=${USER_NAME} . . |
| 73 | +COPY --from=builder --chown=${USER_NAME} "$VENV" "$VENV" |
| 74 | + |
| 75 | +USER ${USER_NAME} |
| 76 | + |
| 77 | +# listening port (not published) |
| 78 | +EXPOSE 8000 |
| 79 | + |
| 80 | +# postgres env vars |
| 81 | +ENV DATABASE_NAME=${POSTGRES_DB:-postgres} |
| 82 | +ENV DATABASE_URL=${POSTGRES_HOST:-db} |
| 83 | +ENV DATABASE_USER=${POSTGRES_USER:-postgres} |
| 84 | +ENV DATABASE_PASSWORD=${POSTGRES_PASSWORD:-mysecretpassword} |
| 85 | +ENV DATABASE_PORT=${POSTGRES_PORT:-5432} |
| 86 | + |
| 87 | +ENTRYPOINT ["python", "app.py"] |
| 88 | +# CMD ["/bin/bash"] |
| 89 | +# CMD ["5000"] |
| 90 | +# CMD ["gunicorn", "-c", "gunicorn.conf.py", "main:app"] |
0 commit comments