70 lines
1.8 KiB
Docker
70 lines
1.8 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
ARG PYTHON_VERSION=3.10.14
|
|
FROM python:${PYTHON_VERSION}-slim AS base
|
|
|
|
# Prevents Python from writing pyc files.
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
|
|
# Keeps Python from buffering stdout and stderr to avoid situations where
|
|
# the application crashes without emitting any logs due to buffering.
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
WORKDIR /app
|
|
|
|
# Create a non-privileged user that the app will run under.
|
|
# See https://docs.docker.com/go/dockerfile-user-best-practices/
|
|
ARG UID=10001
|
|
RUN adduser \
|
|
--disabled-password \
|
|
--gecos "" \
|
|
--home "/nonexistent" \
|
|
--shell "/sbin/nologin" \
|
|
--no-create-home \
|
|
--uid "${UID}" \
|
|
appuser
|
|
|
|
# Download dependencies as a separate step to take advantage of Docker's caching.
|
|
# Leverage a cache mount to /root/.cache/pip to speed up subsequent builds.
|
|
# Leverage a bind mount to requirements.txt to avoid having to copy them into
|
|
# into this layer.
|
|
RUN --mount=type=cache,target=/root/.cache/pip \
|
|
--mount=type=bind,source=requirements.txt,target=requirements.txt \
|
|
python -m pip install -r requirements.txt
|
|
|
|
# Create writeable directory for database
|
|
USER root
|
|
RUN mkdir database
|
|
RUN chmod 755 database
|
|
RUN chown appuser:appuser database
|
|
USER appuser
|
|
|
|
EXPOSE 8000
|
|
|
|
|
|
########
|
|
# Targets diverge from here
|
|
########
|
|
|
|
FROM base AS prod
|
|
|
|
USER root
|
|
RUN --mount=type=cache,target=/root/.cache/pip \
|
|
--mount=type=bind,source=requirements-prod-only.txt,target=requirements-prod-only.txt \
|
|
python -m pip install -r requirements-prod-only.txt
|
|
USER appuser
|
|
|
|
COPY . .
|
|
CMD uvicorn app:app --host 0.0.0.0
|
|
|
|
###
|
|
|
|
FROM base AS dev
|
|
# You probably want sqlite3 to poke around with the database anyway
|
|
USER root
|
|
RUN apt update
|
|
RUN apt install -y sqlite3
|
|
USER appuser
|
|
# Expects that the source code will be mounted into the container
|
|
CMD uvicorn app:app --reload --host 0.0.0.0 --log-config ./local-run-log-config.yaml
|