Felipe Cardoso
ca5f5e3383
- Adjusted `docker-compose.dev.yml` to reflect the new venv location. - Modified entrypoint script and Dockerfile to reference `/opt/venv` for isolated dependencies. - Improved bind mount setup to prevent venv overwrites during development.
87 lines
2.4 KiB
Docker
87 lines
2.4 KiB
Docker
# Development stage
|
|
FROM python:3.12-slim AS development
|
|
|
|
WORKDIR /app
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
PYTHONPATH=/app \
|
|
UV_COMPILE_BYTECODE=1 \
|
|
UV_LINK_MODE=copy \
|
|
UV_NO_CACHE=1 \
|
|
UV_PROJECT_ENVIRONMENT=/opt/venv \
|
|
VIRTUAL_ENV=/opt/venv \
|
|
PATH="/opt/venv/bin:$PATH"
|
|
|
|
# Install system dependencies and uv
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends gcc postgresql-client curl ca-certificates && \
|
|
curl -LsSf https://astral.sh/uv/install.sh | sh && \
|
|
mv /root/.local/bin/uv* /usr/local/bin/ && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy dependency files
|
|
COPY pyproject.toml uv.lock ./
|
|
|
|
# Install dependencies using uv into /opt/venv (outside /app to survive bind mounts)
|
|
RUN uv sync --extra dev --frozen
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
COPY entrypoint.sh /usr/local/bin/
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
# Note: Running as root in development for bind mount compatibility
|
|
# Production stage uses non-root user for security
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
|
|
|
# Production stage
|
|
FROM python:3.12-slim AS production
|
|
|
|
# Create non-root user
|
|
RUN groupadd -r appuser && useradd -r -g appuser appuser
|
|
|
|
WORKDIR /app
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
PYTHONPATH=/app \
|
|
UV_COMPILE_BYTECODE=1 \
|
|
UV_LINK_MODE=copy \
|
|
UV_NO_CACHE=1 \
|
|
UV_PROJECT_ENVIRONMENT=/opt/venv \
|
|
VIRTUAL_ENV=/opt/venv \
|
|
PATH="/opt/venv/bin:$PATH"
|
|
|
|
# Install system dependencies and uv
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends postgresql-client curl ca-certificates && \
|
|
curl -LsSf https://astral.sh/uv/install.sh | sh && \
|
|
mv /root/.local/bin/uv* /usr/local/bin/ && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy dependency files
|
|
COPY pyproject.toml uv.lock ./
|
|
|
|
# Install only production dependencies using uv into /opt/venv
|
|
RUN uv sync --frozen --no-dev
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
COPY entrypoint.sh /usr/local/bin/
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
# Set ownership to non-root user
|
|
RUN chown -R appuser:appuser /app /opt/venv
|
|
|
|
# Switch to non-root user
|
|
USER appuser
|
|
|
|
# Add health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
|
CMD curl -f http://localhost:8000/health || exit 1
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
|
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|