python-stack/Dockerfile at main · stoiet/python-stack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
ARG PYTHON_VERSION
ARG DEBIAN_VERSION
FROM python:${PYTHON_VERSION}-slim-${DEBIAN_VERSION} AS base

ARG USER_NAME
ENV USER_HOME=/home/${USER_NAME}
ENV USER_CONFIG=${USER_HOME}/.config
ENV USER_WORKDIR=${USER_HOME}/workdir

ARG POETRY_VERSION
RUN set -eux && \
    apt-get update && \
    apt-get upgrade --assume-yes && \
    apt-get install --assume-yes --no-install-recommends --no-install-suggests curl && \
    curl -sSL https://install.python-poetry.org | POETRY_HOME=/usr/local POETRY_VERSION=${POETRY_VERSION} python - && \
    apt-get remove --assume-yes --purge curl && \
    apt-get autoremove --assume-yes --purge && \
    apt-get clean && \
    apt-get autoclean && \
    rm -rf /var/lib/apt/lists/*

ARG USER_NAME
ARG USER_UID
RUN useradd -c ${USER_NAME} -d ${USER_HOME} -l -m -s /bin/false -u ${USER_UID} -U ${USER_NAME}

ARG USER_NAME
USER ${USER_NAME}

RUN mkdir -p ${USER_WORKDIR} && \
    mkdir -p ${USER_CONFIG}

COPY --chown=user ./config/poetry.toml ${USER_CONFIG}/pypoetry/config.toml

WORKDIR ${USER_WORKDIR}

FROM base AS dependencies

COPY --chown=user ./poetry.lock ${USER_WORKDIR}/poetry.lock
COPY --chown=user ./pyproject.toml ${USER_WORKDIR}/pyproject.toml

RUN poetry install --sync --no-root --no-directory --all-extras --compile --no-interaction --no-plugins --no-cache

COPY --chown=user ./src ${USER_WORKDIR}/src

FROM base AS compiled

COPY --chown=user ./poetry.lock ${USER_WORKDIR}/poetry.lock
COPY --chown=user ./pyproject.toml ${USER_WORKDIR}/pyproject.toml

RUN poetry install --sync --no-root --no-directory --all-extras --compile --no-interaction --no-plugins --no-cache --only production

COPY --chown=user ./src ${USER_WORKDIR}/src
COPY --chown=user ./entrypoint.sh ${USER_WORKDIR}/entrypoint.sh

RUN poetry run python -m compileall ${USER_WORKDIR}/src

ARG ALPINE_VERSION
ARG PYTHON_VERSION
FROM python:${PYTHON_VERSION}-alpine${ALPINE_VERSION} AS production

ARG USER_NAME
ENV USER_HOME=/home/${USER_NAME}
ENV USER_WORKDIR=${USER_HOME}/workdir

ARG USER_NAME
ARG USER_UID
RUN addgroup --gid ${USER_UID} ${USER_NAME} && \
    adduser -s /bin/false -G ${USER_NAME} -D -u ${USER_UID} ${USER_NAME}

ARG USER_NAME
USER ${USER_NAME}

RUN mkdir -p ${USER_WORKDIR}

COPY --from=compiled --chown=user ${USER_WORKDIR}/.venv ${USER_WORKDIR}/.venv
COPY --from=compiled --chown=user ${USER_WORKDIR}/src ${USER_WORKDIR}/src
COPY --from=compiled --chown=user ${USER_WORKDIR}/entrypoint.sh ${USER_WORKDIR}/entrypoint.sh

WORKDIR ${USER_WORKDIR}

RUN chmod +x ./entrypoint.sh

ENTRYPOINT ["./entrypoint.sh"]

CMD ["python", "-m", "uvicorn", "src.main:app"]