74 lines
2.0 KiB
Docker
74 lines
2.0 KiB
Docker
# define an alias for the specific python version used in this file.
|
|
FROM docker.io/python:3.12.9-slim-bookworm AS python
|
|
|
|
# Python build stage
|
|
FROM python AS python-build-stage
|
|
|
|
ARG BUILD_ENVIRONMENT=production
|
|
|
|
# Install apt packages
|
|
RUN apt-get update && apt-get install --no-install-recommends -y \
|
|
build-essential \
|
|
libpq-dev \
|
|
wait-for-it \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Requirements are installed here to ensure they will be cached.
|
|
COPY ./requirements .
|
|
|
|
# Create Python Dependency and Sub-Dependency Wheels.
|
|
RUN pip wheel --wheel-dir /usr/src/app/wheels \
|
|
-r ${BUILD_ENVIRONMENT}.txt
|
|
|
|
# Python 'run' stage
|
|
FROM python AS python-run-stage
|
|
|
|
ARG BUILD_ENVIRONMENT=production
|
|
ARG APP_HOME=/app
|
|
|
|
ENV PYTHONUNBUFFERED=1 \
|
|
PYTHONDONTWRITEBYTECODE=1 \
|
|
BUILD_ENV=${BUILD_ENVIRONMENT} \
|
|
PATH="/home/django/.local/bin:${PATH}"
|
|
|
|
WORKDIR ${APP_HOME}
|
|
|
|
# Create system user
|
|
RUN addgroup --system django && \
|
|
adduser --system --ingroup django django
|
|
|
|
# Install required system dependencies
|
|
RUN apt-get update && apt-get install --no-install-recommends -y \
|
|
libpq-dev \
|
|
gettext \
|
|
&& apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy python dependency wheels
|
|
COPY --from=python-build-stage /usr/src/app/wheels /wheels/
|
|
|
|
# Install python dependencies
|
|
RUN pip install --no-cache-dir --no-index --find-links=/wheels/ /wheels/* \
|
|
&& rm -rf /wheels/
|
|
|
|
# Copy entrypoint and start scripts
|
|
COPY --chown=django:django ./compose/production/django/entrypoint /entrypoint
|
|
RUN sed -i 's/\r$//g' /entrypoint && \
|
|
chmod +x /entrypoint
|
|
|
|
COPY --chown=django:django ./compose/production/django/start /start
|
|
RUN sed -i 's/\r$//g' /start && \
|
|
chmod +x /start
|
|
|
|
# Copy application code
|
|
COPY --chown=django:django . ${APP_HOME}
|
|
|
|
# Fix permissions
|
|
RUN chown -R django:django ${APP_HOME} && \
|
|
find ${APP_HOME} -type d -exec chmod 755 {} \; && \
|
|
find ${APP_HOME} -type f -exec chmod 644 {} \;
|
|
|
|
USER django
|
|
|
|
ENTRYPOINT ["/entrypoint"]
|