70 lines
1.5 KiB
Text
70 lines
1.5 KiB
Text
|
###########
|
||
|
|
# BUILDER #
|
||
|
|
###########
|
||
|
|
|
||
|
|
# pull official base image
|
||
|
|
FROM python:3.9.5-slim-buster as builder
|
||
|
|
|
||
|
|
# set work directory
|
||
|
|
WORKDIR /usr/src/app
|
||
|
|
|
||
|
|
# set environment variables
|
||
|
|
ENV PYTHONDONTWRITEBYTECODE 1
|
||
|
|
ENV PYTHONUNBUFFERED 1
|
||
|
|
|
||
|
|
# install system dependencies
|
||
|
|
RUN apt-get update && \
|
||
|
|
apt-get install -y --no-install-recommends gcc
|
||
|
|
|
||
|
|
# lint
|
||
|
|
RUN pip install --upgrade pip
|
||
|
|
RUN pip install flake8==3.9.1
|
||
|
|
COPY . /usr/src/app/
|
||
|
|
RUN flake8 --ignore=E501,F401 .
|
||
|
|
|
||
|
|
# install python dependencies
|
||
|
|
COPY ./requirements.txt .
|
||
|
|
RUN pip wheel --no-cache-dir --no-deps --wheel-dir /usr/src/app/wheels -r requirements.txt
|
||
|
|
|
||
|
|
|
||
|
|
#########
|
||
|
|
# FINAL #
|
||
|
|
#########
|
||
|
|
|
||
|
|
# pull official base image
|
||
|
|
FROM python:3.9.5-slim-buster
|
||
|
|
|
||
|
|
# create directory for the app user
|
||
|
|
RUN mkdir -p /home/app
|
||
|
|
|
||
|
|
# create the app user
|
||
|
|
RUN addgroup --system app && adduser --system --group app
|
||
|
|
|
||
|
|
# create the appropriate directories
|
||
|
|
ENV HOME=/home/app
|
||
|
|
ENV APP_HOME=/home/app/web
|
||
|
|
RUN mkdir $APP_HOME
|
||
|
|
WORKDIR $APP_HOME
|
||
|
|
|
||
|
|
# install dependencies
|
||
|
|
RUN apt-get update && apt-get install -y --no-install-recommends netcat
|
||
|
|
COPY --from=builder /usr/src/app/wheels /wheels
|
||
|
|
COPY --from=builder /usr/src/app/requirements.txt .
|
||
|
|
RUN pip install --upgrade pip
|
||
|
|
RUN pip install --no-cache /wheels/*
|
||
|
|
|
||
|
|
# copy entrypoint-prod.sh
|
||
|
|
COPY ./entrypoint.prod.sh $APP_HOME
|
||
|
|
|
||
|
|
# copy project
|
||
|
|
COPY . $APP_HOME
|
||
|
|
|
||
|
|
# chown all the files to the app user
|
||
|
|
RUN chown -R app:app $APP_HOME
|
||
|
|
|
||
|
|
# change to the app user
|
||
|
|
USER app
|
||
|
|
|
||
|
|
# run entrypoint.prod.sh
|
||
|
|
ENTRYPOINT ["/home/app/web/entrypoint.prod.sh"]
|