-
Notifications
You must be signed in to change notification settings - Fork 2
/
Dockerfile
66 lines (56 loc) · 1.94 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
FROM python:3.11.6-slim as base
ARG ENVIRONMENT="production"
ARG NEXUS_LOGIN=""
ARG NEXUS_PASSWORD=""
ENV DEBIAN_FRONTEND=noninteractive \
TZ=Europe/Moscow \
# python:
PYTHONFAULTHANDLER=1 \
PYTHONUNBUFFERED=1 \
PYTHONHASHSEED=random \
PYTHONPATH=/var/install/api/ \
# pip:
PIP_NO_CACHE_DIR=off \
PIP_DISABLE_PIP_VERSION_CHECK=on \
PIP_DEFAULT_TIMEOUT=100 \
# poetry:
POETRY_VERSION=1.3.2 \
POETRY_VIRTUALENVS_CREATE=false \
POETRY_CACHE_DIR='/var/cache/pypoetry'
# setting timezone
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
# System deps
RUN apt-get update \
&& apt-get install --no-install-recommends -y \
python3-dev \
libpq-dev \
build-essential \
curl \
git \
# Cleaning cache:
&& apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/* \
# Installing `poetry` package manager:
# https://github.com/python-poetry/poetry
&& pip install "poetry==$POETRY_VERSION"
WORKDIR /var/install/api
# Copy only requirements, to cache them in docker layer
COPY ./pyproject.toml ./poetry.lock /var/install/api/
# Project initialization:
RUN echo "$ENVIRONMENT" \
&& poetry --version \
# Generating requirements.txt
&& poetry export --without-hashes -f requirements.txt -o /var/install/requirements.txt \
&& poetry install \
$(if [ "$ENVIRONMENT" = 'production' ]; then echo '--no-dev'; fi) \
--no-interaction --no-ansi \
# Do not install the root package (the current project)
--no-root \
# Cleaning poetry installation's cache for production:
&& if [ "$ENVIRONMENT" = 'production' ]; then rm -rf "$POETRY_CACHE_DIR"; fi
# Setting up proper permissions:
RUN groupadd -r web && useradd -d /var/install/api -r -g web web \
&& chown web:web -R /var/install/api
# Running as non-root user:
USER web
COPY ./src/ /var/install/api/
CMD ["uvicorn", "app.asgi:app", "--host", "0.0.0.0", "--port", "3000"]