459280b384
Remove package manager index caches in Dockerfile to reduce image size and improve deployment speed. Even in multi-stage builds, ensure no unnecessary cache data is stored. Package indexes are redundant for runtime operation and only increase storage, bandwidth, and deployment time.
142 lines
3.4 KiB
Docker
142 lines
3.4 KiB
Docker
# Django Meet
|
|
|
|
# ---- base image to inherit from ----
|
|
FROM python:3.13.5-alpine3.21 AS base
|
|
|
|
# Upgrade pip to its latest release to speed up dependencies installation
|
|
RUN python -m pip install --upgrade pip setuptools
|
|
|
|
# Upgrade system packages to install security updates
|
|
RUN apk update && \
|
|
apk upgrade
|
|
|
|
# ---- Back-end builder image ----
|
|
FROM base AS back-builder
|
|
|
|
WORKDIR /builder
|
|
|
|
# Copy required python dependencies
|
|
COPY ./src/backend /builder
|
|
|
|
RUN mkdir /install && \
|
|
pip install --prefix=/install .
|
|
|
|
|
|
# ---- mails ----
|
|
FROM node:20 AS mail-builder
|
|
|
|
COPY ./src/mail /mail/app
|
|
|
|
WORKDIR /mail/app
|
|
|
|
RUN yarn install --frozen-lockfile && \
|
|
yarn build
|
|
|
|
|
|
# ---- static link collector ----
|
|
FROM base AS link-collector
|
|
ARG MEET_STATIC_ROOT=/data/static
|
|
|
|
RUN apk add \
|
|
pango \
|
|
rdfind
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy Meet application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# collectstatic
|
|
RUN DJANGO_CONFIGURATION=Build DJANGO_JWT_PRIVATE_SIGNING_KEY=Dummy \
|
|
python manage.py collectstatic --noinput
|
|
|
|
# Replace duplicated file by a symlink to decrease the overall size of the
|
|
# final image
|
|
RUN rdfind -makesymlinks true -followsymlinks true -makeresultsfile false ${MEET_STATIC_ROOT}
|
|
|
|
# ---- Core application image ----
|
|
FROM base AS core
|
|
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
RUN apk --no-cache add \
|
|
cairo \
|
|
gdk-pixbuf \
|
|
gettext \
|
|
libffi-dev \
|
|
pango \
|
|
shared-mime-info
|
|
|
|
|
|
# Copy entrypoint
|
|
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
|
|
|
|
# Give the "root" group the same permissions as the "root" user on /etc/passwd
|
|
# to allow a user belonging to the root group to add new users; typically the
|
|
# docker user (see entrypoint).
|
|
RUN chmod g=u /etc/passwd
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy Meet application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# We wrap commands run in this container by the following entrypoint that
|
|
# creates a user on-the-fly with the container user ID (see USER) and root group
|
|
# ID.
|
|
ENTRYPOINT [ "/usr/local/bin/entrypoint" ]
|
|
|
|
# ---- Development image ----
|
|
FROM core AS backend-development
|
|
|
|
# Switch back to the root user to install development dependencies
|
|
USER root:root
|
|
|
|
# Install psql
|
|
RUN apk add postgresql-client
|
|
|
|
# Uninstall Meet and re-install it in editable mode along with development
|
|
# dependencies
|
|
RUN pip uninstall -y meet
|
|
RUN pip install -e .[dev]
|
|
|
|
# Restore the un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Target database host (e.g. database engine following docker compose services
|
|
# name) & port
|
|
ENV DB_HOST=postgresql \
|
|
DB_PORT=5432
|
|
|
|
# Run django development server
|
|
CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
|
|
|
|
# ---- Production image ----
|
|
FROM core AS backend-production
|
|
|
|
ARG MEET_STATIC_ROOT=/data/static
|
|
|
|
# Gunicorn
|
|
RUN mkdir -p /usr/local/etc/gunicorn
|
|
COPY docker/files/usr/local/etc/gunicorn/meet.py /usr/local/etc/gunicorn/meet.py
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Copy statics
|
|
COPY --from=link-collector ${MEET_STATIC_ROOT} ${MEET_STATIC_ROOT}
|
|
|
|
# Copy Meet mails
|
|
COPY --from=mail-builder /mail/backend/core/templates/mail /app/core/templates/mail
|
|
|
|
# The default command runs gunicorn WSGI server in Meet's main module
|
|
CMD ["gunicorn", "-c", "/usr/local/etc/gunicorn/meet.py", "meet.wsgi:application"]
|