mirrors/LibreTranslate
1
1
Fork 1
mirror of https://github.com/LibreTranslate/LibreTranslate.git synced 2024-11-21 23:41:01 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #312 from eugene-davis/non-root-user

Browse source 
Non-root User for Dockerfile and Multi-Stage Build
This commit is contained in:
Piero Toffanin 2022-09-14 01:45:32 -04:00 committed by GitHub
commit 7b7cd7768b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 21 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
Dockerfile
View file

@ -1,7 +1,4 @@
FROM python:3.8.12-slim-bullseye FROM python:3.8.14-slim-bullseye as builder
ARG with_models=false
ARG models=
WORKDIR /app WORKDIR /app
@ -13,24 +10,35 @@ RUN apt-get update -qq \
RUN apt-get update && apt-get upgrade --assume-yes RUN apt-get update && apt-get upgrade --assume-yes
RUN pip install --upgrade pip RUN python -mvenv venv && ./venv/bin/pip install --upgrade pip
COPY . . COPY . .
# Install package from source code
RUN ./venv/bin/pip install . \
&& ./venv/bin/pip cache purge
FROM python:3.8.14-slim-bullseye
ARG with_models=false
ARG models=
RUN addgroup --system --gid 1032 libretranslate && adduser --system --uid 1032 libretranslate
RUN apt-get update -qq && apt-get -qqq install --no-install-recommends -y libicu67 && apt-get clean && rm -rf /var/lib/apt
USER libretranslate
COPY --from=builder --chown=1032:1032 /app /app
WORKDIR /app
RUN if [ "$with_models" = "true" ]; then \ RUN if [ "$with_models" = "true" ]; then \
# install only the dependencies first
pip install -e .; \
# initialize the language models # initialize the language models
if [ ! -z "$models" ]; then \ if [ ! -z "$models" ]; then \
./install_models.py --load_only_lang_codes "$models"; \ ./venv/bin/python install_models.py --load_only_lang_codes "$models"; \
else \ else \
./install_models.py; \ ./venv/bin/python install_models.py; \
fi \ fi \
fi fi
# Install package from source code
RUN pip install . \
&& pip cache purge
EXPOSE 5000 EXPOSE 5000
ENTRYPOINT [ "libretranslate", "--host", "0.0.0.0" ] ENTRYPOINT [ "./venv/bin/libretranslate", "--host", "0.0.0.0" ]