7efe9b5404
* Docker: `poetry install` verbosely * Now try building on ARM * Don't use workflow repo's docker workflow This config seemed to build arm wheels much more quickly and I've no idea why!?!! * Changelog * Revert "Now try building on ARM" This reverts commit c733ced9c8ec1acdd91443cada1d9c83e221dbba. * Remove bad copypasta
62 lines
2.1 KiB
Docker
62 lines
2.1 KiB
Docker
# This Dockerfile installs Sydent from source, which is assumed to be in the current
|
|
# working directory. The resulting image contains a single "sydent" user, and populates
|
|
# their home area with "src" and "venv" directories. The entrypoint runs Sydent,
|
|
# listening on port 8090.
|
|
#
|
|
# Users must provide a persistent volume available to the container as `/data`. This
|
|
# will contain Sydent's configuration and database. A blank configuration and database
|
|
# file is created the first time Sydent runs.
|
|
|
|
# Step 1: install dependencies
|
|
FROM docker.io/python:3.8-slim-bookworm as builder
|
|
|
|
# Add user sydent
|
|
RUN addgroup --system --gid 993 sydent \
|
|
&& useradd -m --system --uid 993 -g sydent sydent
|
|
USER sydent:sydent
|
|
|
|
# Install poetry
|
|
RUN pip install --user poetry==1.2.2
|
|
|
|
# Copy source code and resources
|
|
WORKDIR /home/sydent/src
|
|
COPY --chown=sydent:sydent ["res", "res"]
|
|
COPY --chown=sydent:sydent ["scripts", "scripts"]
|
|
COPY --chown=sydent:sydent ["sydent", "sydent"]
|
|
COPY --chown=sydent:sydent ["README.rst", "pyproject.toml", "poetry.lock", "./"]
|
|
|
|
# Install dependencies
|
|
RUN python -m poetry install -vv --no-dev --no-interaction --extras "prometheus sentry"
|
|
|
|
# Record dependencies for posterity
|
|
RUN python -m poetry export -o requirements.txt
|
|
|
|
# Make the virtualenv accessible for the final image
|
|
RUN ln -s $(python -m poetry env info -p) /home/sydent/venv
|
|
|
|
# Nuke bytecode files to keep the final image slim.
|
|
RUN find /home/sydent/venv -type f -name '*.pyc' -delete
|
|
|
|
# Step 2: Create runtime image
|
|
FROM docker.io/python:3.8-slim-bookworm
|
|
|
|
# Add user sydent and create /data directory
|
|
RUN addgroup --system --gid 993 sydent \
|
|
&& useradd -m --system --uid 993 -g sydent sydent \
|
|
&& mkdir /data \
|
|
&& chown sydent:sydent /data
|
|
|
|
# Copy sydent and the virtualenv
|
|
COPY --from=builder ["/home/sydent/src", "/home/sydent/src"]
|
|
COPY --from=builder ["/home/sydent/venv", "/home/sydent/venv"]
|
|
|
|
ENV SYDENT_CONF=/data/sydent.conf
|
|
ENV SYDENT_PID_FILE=/data/sydent.pid
|
|
ENV SYDENT_DB_PATH=/data/sydent.db
|
|
|
|
WORKDIR /home/sydent
|
|
USER sydent:sydent
|
|
VOLUME ["/data"]
|
|
EXPOSE 8090/tcp
|
|
CMD [ "venv/bin/python", "-m", "sydent.sydent" ]
|