Repository navigation
Expand file tree
/
Copy pathDockerfile_debian
More file actions
185 lines (167 loc) · 6.54 KB
/
Copy pathDockerfile_debian
File metadata and controls
185 lines (167 loc) · 6.54 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
# syntax=docker/dockerfile:1.1.7-experimental
#############################################
# Tox testsuite for multiple python version #
#############################################
FROM advian/tox-base:debian-bookworm as tox
ARG PYTHON_VERSIONS="3.11 3.13 3.12"
ARG POETRY_VERSION="2.1.3"
RUN export RESOLVED_VERSIONS=`pyenv_resolve $PYTHON_VERSIONS` \
&& echo RESOLVED_VERSIONS=$RESOLVED_VERSIONS \
&& for pyver in $RESOLVED_VERSIONS; do pyenv install -s $pyver; done \
&& pyenv global $RESOLVED_VERSIONS \
&& poetry self update $POETRY_VERSION || pip install -U poetry==$POETRY_VERSION \
&& pip install -U tox --break-system-packages \
&& apt-get update && apt-get install -y \
git \
git-lfs \
musl-dev \
&& ln -s /usr/lib/x86_64-linux-musl/libc.so /lib/libc.musl-$(uname -m).so.1 \
&& rm -rf /var/lib/apt/lists/* \
&& true
COPY ./poetry.lock ./pyproject.toml ./README.rst ./.pre-commit-config.yaml ./docker /app/
WORKDIR /app
RUN mkdir -p src/python_takserver_api \
&& echo '"""placeholder"""' >src/python_takserver_api/__init__.py \
&& poetry install \
&& export SKIP="mypy,pylint,poetry-lock" \
&& poetry run docker/pre_commit_init.sh \
&& unset SKIP \
&& poetry env remove --all
######################
# Base builder image #
######################
FROM python:3.13-bookworm as builder_base
ENV \
# locale
LC_ALL=C.UTF-8 \
# python:
PYTHONFAULTHANDLER=1 \
PYTHONUNBUFFERED=1 \
PYTHONHASHSEED=random \
# pip:
PIP_NO_CACHE_DIR=off \
PIP_DISABLE_PIP_VERSION_CHECK=on \
PIP_DEFAULT_TIMEOUT=100 \
# poetry:
POETRY_VERSION=2.1.3
RUN apt-get update && apt-get install -y \
curl \
git \
git-lfs \
bash \
build-essential \
libffi-dev \
libssl-dev \
libzmq3-dev \
tini \
openssh-client \
cargo \
musl-dev \
&& apt-get autoremove -y \
&& rm -rf /var/lib/apt/lists/* \
# githublab ssh
&& mkdir -p -m 0700 ~/.ssh && ssh-keyscan gitlab.com github.com | sort > ~/.ssh/known_hosts \
# Installing `poetry` package manager:
&& curl -sSL https://install.python-poetry.org | python3 - \
&& echo 'export PATH="/root/.local/bin:$PATH"' >>/root/.profile \
&& export PATH="/root/.local/bin:$PATH" \
&& true
SHELL ["/bin/bash", "-lc"]
# Copy only requirements, to cache them in docker layer:
WORKDIR /pysetup
COPY ./poetry.lock ./pyproject.toml ./README.rst /pysetup/
# Install basic requirements (utilizing an internal docker wheelhouse if available)
RUN --mount=type=ssh pip3 install --upgrade pip \
&& pip3 install --upgrade wheel virtualenv setuptools \
&& poetry self add poetry-plugin-export \
&& poetry export -f requirements.txt --without-hashes -o /tmp/requirements.txt \
&& pip3 wheel --wheel-dir=/tmp/wheelhouse --trusted-host 172.17.0.1 --find-links=http://172.17.0.1:3141/debian/ -r /tmp/requirements.txt \
&& virtualenv /.venv && source /.venv/bin/activate && echo 'source /.venv/bin/activate' >>/root/.profile \
&& pip3 install --no-deps --trusted-host 172.17.0.1 --find-links=http://172.17.0.1:3141/debian/ --find-links=/tmp/wheelhouse/ -r /tmp/requirements.txt \
&& true
####################################
# Base stage for production builds #
####################################
FROM builder_base as production_build
# Copy entrypoint script
COPY ./docker/entrypoint.sh /docker-entrypoint.sh
# Only files needed by production setup
COPY ./poetry.lock ./pyproject.toml ./README.rst ./src /app/
WORKDIR /app
# Build the wheel package with poetry and add it to the wheelhouse
RUN --mount=type=ssh source /.venv/bin/activate \
&& poetry build -f wheel --no-interaction --no-ansi \
&& cp dist/*.whl /tmp/wheelhouse \
&& chmod a+x /docker-entrypoint.sh \
&& true
#########################
# Main production build #
#########################
FROM python:3.13-slim-bookworm as production
COPY --from=production_build /tmp/wheelhouse /tmp/wheelhouse
COPY --from=production_build /docker-entrypoint.sh /docker-entrypoint.sh
WORKDIR /app
# Install system level deps for running the package (not devel versions for building wheels)
# and install the wheels we built in the previous step. generate default config
RUN --mount=type=ssh apt-get update && apt-get install -y \
bash \
libffi8 \
libzmq5 \
tini \
&& apt-get autoremove -y \
&& rm -rf /var/lib/apt/lists/* \
&& chmod a+x /docker-entrypoint.sh \
&& WHEELFILE=`echo /tmp/wheelhouse/python_takserver_api-*.whl` \
&& pip3 install --trusted-host 172.17.0.1 --find-links=http://172.17.0.1:3141/debian/ --find-links=/tmp/wheelhouse/ "$WHEELFILE"[all] \
&& rm -rf /tmp/wheelhouse/ \
# Do whatever else you need to
&& true
ENTRYPOINT ["/usr/bin/tini", "--", "/docker-entrypoint.sh"]
#####################################
# Base stage for development builds #
#####################################
FROM builder_base as devel_build
# Install deps
WORKDIR /pysetup
RUN --mount=type=ssh source /.venv/bin/activate \
&& mkdir -p src/python_takserver_api \
&& echo '"""placeholder"""' >src/python_takserver_api/__init__.py \
&& export PIP_FIND_LINKS=http://172.17.0.1:3141/debian/ \
&& export PIP_TRUSTED_HOST=172.17.0.1 \
&& poetry install --no-interaction --no-ansi \
&& true
#0############
# Run tests #
#############
FROM devel_build as test
COPY . /app
WORKDIR /app
ENTRYPOINT ["/usr/bin/tini", "--", "docker/entrypoint-test.sh"]
# Re run install to get the service itself installed
RUN --mount=type=ssh source /.venv/bin/activate \
&& export PIP_FIND_LINKS=http://172.17.0.1:3141/debian/ \
&& export PIP_TRUSTED_HOST=172.17.0.1 \
&& poetry lock \
&& poetry install --no-interaction --no-ansi \
&& docker/pre_commit_init.sh \
&& true
###########
# Hacking #
###########
FROM devel_build as devel_shell
# Copy everything to the image
COPY . /app
WORKDIR /app
RUN apt-get update && apt-get install -y zsh vim \
&& sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" \
&& echo "if [ \"\$NO_WHEELHOUSE\" = \"1\" ]" >>/root/.profile \
&& echo "then" >>/root/.profile \
&& echo " echo \"Wheelhouse disabled\"" >>/root/.profile \
&& echo "else">>/root/.profile \
&& echo " export PIP_TRUSTED_HOST=172.17.0.1" >>/root/.profile \
&& echo " export PIP_FIND_LINKS=http://172.17.0.1:3141/debian/" >>/root/.profile \
&& echo "fi" >>/root/.profile \
&& echo "source /root/.profile" >>/root/.zshrc \
&& pip3 install git-up \
&& true
ENTRYPOINT ["/bin/zsh", "-l"]