-
-
Notifications
You must be signed in to change notification settings - Fork 3
/
Dockerfile
75 lines (65 loc) · 2.44 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
FROM python:3.9.5-slim-buster
ARG UID=1000
ARG GID=1000
ARG APP_MIGRATE=off
ARG START_APP=off
ENV APP_MIGRATE=${APP_MIGRATE} \
START_APP=${START_APP} \
# https://docs.python.org/3.8/using/cmdline.html
PYTHONFAULTHANDLER=1 \
PYTHONUNBUFFERED=1 \
PYTHONHASHSEED=random \
# https://github.com/pypa/pip/blob/master/src/pip/_internal/cli/cmdoptions.py
PIP_NO_CACHE_DIR=on \
PIP_DISABLE_PIP_VERSION_CHECK=on \
PIP_DEFAULT_TIMEOUT=100 \
# https://github.com/jwilder/dockerize
DOCKERIZE_VERSION=v0.6.1 \
# https://github.com/python-poetry/poetry
POETRY_VERSION=1.1.6
# Create user and group for running app
RUN groupadd -r -g $GID app && useradd --no-log-init -r -u $UID -g app app
# System deps
RUN apt-get update \
&& apt-get install --assume-yes --no-install-recommends --no-install-suggests \
tini \
&& rm -rf /var/lib/apt/lists/*
# This is a special case. We need to run this script as an entry point
COPY ./docker-entrypoint.sh /docker-entrypoint.sh
COPY ./docker-cmd.sh /docker-cmd.sh
RUN chmod +x "/docker-entrypoint.sh" \
&& chmod +x "/docker-cmd.sh"
# Copy only requirements, to cache them in docker layer
WORKDIR /pysetup
COPY ./poetry.lock ./pyproject.toml /pysetup/
# Building system and app dependencies
RUN set -ex \
&& savedAptMark="$(apt-mark showmanual)" \
&& apt-get update \
&& apt-get install --assume-yes --no-install-recommends --no-install-suggests \
wget \
&& wget -nv "https://github.com/jwilder/dockerize/releases/download/${DOCKERIZE_VERSION}/dockerize-linux-amd64-${DOCKERIZE_VERSION}.tar.gz" \
&& tar -C /usr/local/bin -xzvf "dockerize-linux-amd64-${DOCKERIZE_VERSION}.tar.gz" \
&& rm "dockerize-linux-amd64-${DOCKERIZE_VERSION}.tar.gz" \
&& pip install "poetry==$POETRY_VERSION" \
&& poetry config virtualenvs.create false \
&& poetry install --no-interaction --no-ansi \
&& apt-mark auto '.*' > /dev/null \
&& apt-mark manual $savedAptMark \
&& find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' \
| awk '/=>/ { print $(NF-1) }' \
| sort -u \
| xargs -r dpkg-query --search \
| cut -d: -f1 \
| sort -u \
| xargs -r apt-mark manual \
&& apt-get purge --assume-yes --auto-remove \
--option APT::AutoRemove::RecommendsImportant=false \
--option APT::AutoRemove::SuggestsImportant=false \
&& rm -rf /var/lib/apt/lists/*
USER app
COPY --chown=app:app . /app
WORKDIR /app
RUN pybabel compile -d locale
ENTRYPOINT ["/usr/bin/tini", "--", "/docker-entrypoint.sh"]
CMD ["/docker-cmd.sh"]