85 lines
2.8 KiB
Docker
85 lines
2.8 KiB
Docker
ARG APP_USER_UID=1000
|
|
ARG APP_USER_GID=1000
|
|
|
|
FROM python:3.12.11-slim-bookworm AS base
|
|
|
|
ARG APP_USER_UID
|
|
ARG APP_USER_GID
|
|
|
|
ENV PIP_DEFAULT_TIMEOUT=100 \
|
|
PIP_DISABLE_PIP_VERSION_CHECK=on \
|
|
PIP_INDEX_URL="https://nexus.bthlabs.pl/repository/pypi/simple/" \
|
|
PIP_NO_CACHE_DIR=off \
|
|
POETRY_HOME="/srv/poetry" \
|
|
POETRY_NO_INTERACTION=1 \
|
|
POETRY_VERSION=1.8.3 \
|
|
PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
VIRTUAL_ENV="/srv/venv" \
|
|
YARN_MODULES_FOLDER="/srv/node_modules" \
|
|
YARN_REGISTRY="https://nexus.bthlabs.pl/repository/npm/"
|
|
|
|
RUN if [ ! $(getent group ${APP_USER_GID}) ];then groupadd -g ${APP_USER_GID} app; fi && \
|
|
useradd -m -d /home/app -u ${APP_USER_UID} -g ${APP_USER_GID} app && \
|
|
apt-get update && \
|
|
apt-get install --no-install-recommends -y curl iputils-ping less net-tools vim-tiny wget && \
|
|
(curl -sSL https://install.python-poetry.org | python -) && \
|
|
python3.12 -m venv ${VIRTUAL_ENV} && \
|
|
mkdir /srv/app /srv/bin /srv/etc /srv/etc/entrypoint.d/ /srv/lib /srv/local /srv/log /srv/node_modules /srv/opt /srv/packages /srv/run /srv/tmp /srv/uploads
|
|
|
|
COPY --chown=$APP_USER_UID:$APP_USER_GID base/ops/bin/*.sh /srv/bin/
|
|
RUN chown -R ${APP_USER_UID}:${APP_USER_GID} /srv
|
|
|
|
ENV PATH="${VIRTUAL_ENV}/bin:/srv/bin:/srv/poetry/bin:${PATH}"
|
|
|
|
USER app
|
|
WORKDIR /srv/app
|
|
|
|
ENTRYPOINT ["/srv/bin/entrypoint.sh"]
|
|
CMD ["echo", "NOOP"]
|
|
|
|
FROM base AS build-python
|
|
|
|
ARG APP_USER_UID
|
|
ARG APP_USER_GID
|
|
ARG IMAGE_ARCH
|
|
|
|
USER root
|
|
RUN MACHINE=$(uname -m) && \
|
|
case "${MACHINE}" in \
|
|
x86_64 | amd64) IMAGE_ARCH="amd64" ;; \
|
|
aarch64 | arm64) IMAGE_ARCH="arm64" ;; \
|
|
*) echo "Unsupported machime: ${MACHINE}" >&2; exit 1 ;; \
|
|
esac && \
|
|
apt-get update && \
|
|
apt-get install --no-install-recommends -y build-essential inotify-tools wait-for-it && \
|
|
(mkdir /srv/tmp/minify; cd /srv/tmp/minify; wget -O minify.tar.gz https://github.com/tdewolff/minify/releases/download/v2.23.11/minify_linux_${IMAGE_ARCH}.tar.gz; tar xvf minify.tar.gz; mv minify /srv/bin; cd /srv/app; rm -rf /srv/tmp/minify) && \
|
|
chown -R ${APP_USER_UID}:${APP_USER_GID} /srv
|
|
|
|
USER app
|
|
|
|
FROM build-python AS build-node
|
|
|
|
ARG APP_USER_UID
|
|
ARG APP_USER_GID
|
|
ARG NODE_ARCH
|
|
|
|
USER root
|
|
RUN MACHINE=$(uname -m) && \
|
|
case "${MACHINE}" in \
|
|
x86_64 | amd64) NODE_ARCH="x64" ;; \
|
|
aarch64 | arm64) NODE_ARCH="arm64" ;; \
|
|
*) echo "Unsupported arch: $arch" >&2; exit 1 ;; \
|
|
esac && \
|
|
wget -O /srv/tmp/node.tar.xz https://nodejs.org/download/release/v22.14.0/node-v22.14.0-linux-${NODE_ARCH}.tar.xz && \
|
|
tar xvf /srv/tmp/node.tar.xz -C /srv/opt && \
|
|
rm -f /srv/tmp/node.tar.xz && \
|
|
mv /srv/opt/node-v22.14.0-linux-${NODE_ARCH} /srv/opt/node
|
|
|
|
ENV PATH="/srv/opt/node/bin:${PATH}"
|
|
|
|
RUN npm install -g yarn@1.22.22 && \
|
|
chown -R ${APP_USER_UID}:${APP_USER_GID} /srv
|
|
|
|
USER app
|