a2ff33663b
It was quite confusing having development, production and frontend images' names in the same Docker file. New comers to the project would have some difficuluties when differentiating frontend from backend images. Try to make these naming more explicit and consistent. Thanks @rouja for your recommendation.
198 lines
4.9 KiB
Docker
198 lines
4.9 KiB
Docker
# Django People
|
|
|
|
# ---- base image to inherit from ----
|
|
FROM python:3.10-slim-bullseye as base
|
|
|
|
# Upgrade pip to its latest release to speed up dependencies installation
|
|
RUN python -m pip install --upgrade pip
|
|
|
|
# Upgrade system packages to install security updates
|
|
RUN apt-get update && \
|
|
apt-get -y upgrade && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
### ---- Front-end dependencies image ----
|
|
FROM node:20 as frontend-deps
|
|
|
|
WORKDIR /deps
|
|
|
|
COPY ./src/frontend/package.json ./package.json
|
|
COPY ./src/frontend/yarn.lock ./yarn.lock
|
|
COPY ./src/frontend/apps/desk/package.json ./apps/desk/package.json
|
|
COPY ./src/frontend/packages/i18n/package.json ./packages/i18n/package.json
|
|
COPY ./src/frontend/packages/eslint-config-people/package.json ./packages/eslint-config-people/package.json
|
|
|
|
RUN yarn --frozen-lockfile
|
|
|
|
### ---- Front-end builder image ----
|
|
FROM node:20 as frontend-builder
|
|
|
|
WORKDIR /builder
|
|
|
|
COPY --from=frontend-deps /deps/node_modules ./node_modules
|
|
COPY ./src/frontend .
|
|
|
|
WORKDIR ./apps/desk
|
|
|
|
RUN yarn build
|
|
|
|
|
|
# ---- Front-end image ----
|
|
FROM nginxinc/nginx-unprivileged:1.25 as frontend-production
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
COPY --from=frontend-builder \
|
|
/builder/apps/desk/out \
|
|
/usr/share/nginx/html
|
|
|
|
COPY ./src/frontend/apps/desk/conf/default.conf /etc/nginx/conf.d
|
|
|
|
# Copy entrypoint
|
|
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
|
|
|
|
ENTRYPOINT [ "/usr/local/bin/entrypoint" ]
|
|
|
|
CMD ["nginx", "-g", "daemon off;"]
|
|
|
|
|
|
# ---- Back-end builder image ----
|
|
FROM base as back-builder
|
|
|
|
WORKDIR /builder
|
|
|
|
# Copy required python dependencies
|
|
COPY ./src/backend /builder
|
|
|
|
RUN mkdir /install && \
|
|
pip install --prefix=/install .
|
|
|
|
|
|
# ---- mails ----
|
|
FROM node:20 as mail-builder
|
|
|
|
COPY ./src/mail /mail/app
|
|
|
|
WORKDIR /mail/app
|
|
|
|
RUN yarn install --frozen-lockfile && \
|
|
yarn build
|
|
|
|
|
|
# ---- static link collector ----
|
|
FROM base as link-collector
|
|
ARG PEOPLE_STATIC_ROOT=/data/static
|
|
|
|
# Install libpangocairo & rdfind
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
libpangocairo-1.0-0 \
|
|
rdfind && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy people application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# collectstatic
|
|
RUN DJANGO_CONFIGURATION=Build DJANGO_JWT_PRIVATE_SIGNING_KEY=Dummy \
|
|
python manage.py collectstatic --noinput
|
|
|
|
# Replace duplicated file by a symlink to decrease the overall size of the
|
|
# final image
|
|
RUN rdfind -makesymlinks true -followsymlinks true -makeresultsfile false ${PEOPLE_STATIC_ROOT}
|
|
|
|
# ---- Core application image ----
|
|
FROM base as core
|
|
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# Install required system libs
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
gettext \
|
|
libcairo2 \
|
|
libffi-dev \
|
|
libgdk-pixbuf2.0-0 \
|
|
libpango-1.0-0 \
|
|
libpangocairo-1.0-0 \
|
|
shared-mime-info && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy entrypoint
|
|
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
|
|
|
|
# Give the "root" group the same permissions as the "root" user on /etc/passwd
|
|
# to allow a user belonging to the root group to add new users; typically the
|
|
# docker user (see entrypoint).
|
|
RUN chmod g=u /etc/passwd
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy people application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# We wrap commands run in this container by the following entrypoint that
|
|
# creates a user on-the-fly with the container user ID (see USER) and root group
|
|
# ID.
|
|
ENTRYPOINT [ "/usr/local/bin/entrypoint" ]
|
|
|
|
# ---- Development image ----
|
|
FROM core as backend-development
|
|
|
|
# Switch back to the root user to install development dependencies
|
|
USER root:root
|
|
|
|
# Install psql
|
|
RUN apt-get update && \
|
|
apt-get install -y postgresql-client && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Uninstall people and re-install it in editable mode along with development
|
|
# dependencies
|
|
RUN pip uninstall -y people
|
|
RUN pip install -e .[dev]
|
|
|
|
# Restore the un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Target database host (e.g. database engine following docker compose services
|
|
# name) & port
|
|
ENV DB_HOST=postgresql \
|
|
DB_PORT=5432
|
|
|
|
# Run django development server
|
|
CMD python manage.py runserver 0.0.0.0:8000
|
|
|
|
# ---- Production image ----
|
|
FROM core as backend-production
|
|
|
|
ARG PEOPLE_STATIC_ROOT=/data/static
|
|
|
|
# Gunicorn
|
|
RUN mkdir -p /usr/local/etc/gunicorn
|
|
COPY docker/files/usr/local/etc/gunicorn/people.py /usr/local/etc/gunicorn/people.py
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Copy statics
|
|
COPY --from=link-collector ${PEOPLE_STATIC_ROOT} ${PEOPLE_STATIC_ROOT}
|
|
|
|
# Copy people mails
|
|
COPY --from=mail-builder /mail/backend/core/templates/mail /app/core/templates/mail
|
|
|
|
# The default command runs gunicorn WSGI server in people's main module
|
|
CMD gunicorn -c /usr/local/etc/gunicorn/people.py people.wsgi:application
|