8afc003004
`backend-development` and `backend-production` CMD syntaxes were using a Shell Form. Shell form prevented Unix signals from reaching our container correctly, such as SIGTERM. Also, the shell process ends up being the PID 1, instead of our Python scripts. Docker recommends to use the exec form whenever possible.
140 lines
3.6 KiB
Docker
140 lines
3.6 KiB
Docker
# Django impress
|
|
|
|
# ---- base image to inherit from ----
|
|
FROM python:3.10-slim-bookworm as base
|
|
|
|
# Upgrade pip to its latest release to speed up dependencies installation
|
|
RUN python -m pip install --upgrade pip
|
|
|
|
# Upgrade system packages to install security updates
|
|
# python3-pip python3-cffi python3-brotli \
|
|
RUN apt-get update && \
|
|
apt-get -y upgrade && \
|
|
apt-get -y install \
|
|
gettext \
|
|
libpango-1.0-0 libpangoft2-1.0-0 pango1.0-tools && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# ---- Back-end builder image ----
|
|
FROM base as back-builder
|
|
|
|
WORKDIR /builder
|
|
|
|
# Copy required python dependencies
|
|
COPY ./src/backend /builder
|
|
|
|
RUN mkdir /install && \
|
|
pip install --prefix=/install .
|
|
|
|
# ---- mails ----
|
|
FROM node:18 as mail-builder
|
|
|
|
COPY ./src/mail /mail/app
|
|
|
|
WORKDIR /mail/app
|
|
|
|
RUN yarn install --frozen-lockfile && \
|
|
yarn build
|
|
|
|
# ---- static link collector ----
|
|
FROM base as link-collector
|
|
ARG IMPRESS_STATIC_ROOT=/data/static
|
|
|
|
# Install rdfind
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
rdfind && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy impress application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# collectstatic
|
|
RUN DJANGO_CONFIGURATION=Build \
|
|
python manage.py collectstatic --noinput
|
|
|
|
# Replace duplicated file by a symlink to decrease the overall size of the
|
|
# final image
|
|
RUN rdfind -makesymlinks true -followsymlinks true -makeresultsfile false ${IMPRESS_STATIC_ROOT}
|
|
|
|
# ---- Core application image ----
|
|
FROM base as core
|
|
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# Copy entrypoint
|
|
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
|
|
|
|
# Give the "root" group the same permissions as the "root" user on /etc/passwd
|
|
# to allow a user belonging to the root group to add new users; typically the
|
|
# docker user (see entrypoint).
|
|
RUN chmod g=u /etc/passwd
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy impress application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# We wrap commands run in this container by the following entrypoint that
|
|
# creates a user on-the-fly with the container user ID (see USER) and root group
|
|
# ID.
|
|
ENTRYPOINT [ "/usr/local/bin/entrypoint" ]
|
|
|
|
# ---- Development image ----
|
|
FROM core as development
|
|
|
|
# Switch back to the root user to install development dependencies
|
|
USER root:root
|
|
|
|
# Install psql
|
|
RUN apt-get update && \
|
|
apt-get install -y postgresql-client && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Uninstall impress and re-install it in editable mode along with development
|
|
# dependencies
|
|
RUN pip uninstall -y impress
|
|
RUN pip install -e .[dev]
|
|
|
|
# Restore the un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Target database host (e.g. database engine following docker compose services
|
|
# name) & port
|
|
ENV DB_HOST=postgresql \
|
|
DB_PORT=5432
|
|
|
|
# Run django development server
|
|
CMD python manage.py runserver 0.0.0.0:8000
|
|
|
|
# ---- Production image ----
|
|
FROM core as production
|
|
|
|
ARG IMPRESS_STATIC_ROOT=/data/static
|
|
|
|
# Gunicorn
|
|
RUN mkdir -p /usr/local/etc/gunicorn
|
|
COPY docker/files/usr/local/etc/gunicorn/impress.py /usr/local/etc/gunicorn/impress.py
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Copy statics
|
|
COPY --from=link-collector ${IMPRESS_STATIC_ROOT} ${IMPRESS_STATIC_ROOT}
|
|
|
|
# Copy impress mails
|
|
COPY --from=mail-builder /mail/backend/core/templates/mail /app/core/templates/mail
|
|
|
|
# The default command runs gunicorn WSGI server in impress's main module
|
|
CMD ["gunicorn", "-c", "/usr/local/etc/gunicorn/impress.py", "impress.wsgi:application"]
|