mirrors/bookwyrm
1
0
Fork 1
mirror of https://github.com/bookwyrm-social/bookwyrm.git synced 2025-04-15 14:54:06 +00:00
Code Issues Projects Releases Wiki Activity

Rework Dockerfile to create smaller container and run as non-root by default

Browse source 
This changes the created image size from ~1.3G -> ~0.5G  and runs code as non-root uid in container
This commit is contained in:
Ilkka Ollakka 2025-04-05 14:50:00 +03:00
parent 4c764cd543
commit fe0aebb4a6
1 changed files with 23 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
Dockerfile
View file

@ -1,12 +1,29 @@
FROM python:3.11
FROM python:3.11 AS build-image
ENV PYTHONUNBUFFERED 1
RUN mkdir /app /app/static /app/images
WORKDIR /app
RUN apt-get update && apt-get install -y gettext libgettextpo-dev tidy && apt-get clean
WORKDIR /app
COPY requirements.txt /app/
RUN pip install -r requirements.txt --no-cache-dir
RUN python -mvenv /venv
ENV PATH=/venv/bin:$PATH
RUN pip install --compile -r requirements.txt --no-cache-dir
FROM python:3.11-slim
RUN apt-get update && apt-get install -y gettext libpq5 tidy && apt-get clean
RUN mkdir -p /app/images /app/static
RUN addgroup --system app && adduser --system --group bookwyrm
RUN mkdir -p /app/static /app/images && chown bookwyrm:bookwyrm /app/static /app/images
WORKDIR /app
USER bookwyrm
COPY --from=build-image /venv /venv
ENV PYTHONUNBUFFERED=1
ENV PATH=/venv/bin:$PATH