auth/Dockerfile at main · CoTechStore/auth · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# ---------------- Base -----------------------
FROM python:3.12-alpine AS python-base

ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    PYTHONOPTIMIZE=1 \
    LANG=C.UTF-8 \
    LC_ALL=C.UTF-8 \
    APP_PATH="/app"

ENV VIRTUAL_ENV="$APP_PATH/.venv"
ENV PATH="$VIRTUAL_ENV/bin:$PATH"

# ----------------------------------------------

# --------------- Base Builder -----------------
FROM python-base AS base-builder

ENV UV_LINK_MODE=copy \
    UV_PYTHON_DOWNLOADS=0 \
    UV_HTTP_TIMEOUT=100 \
    UV_PROJECT_ENVIRONMENT=$VIRTUAL_ENV

COPY --link --from=ghcr.io/astral-sh/uv:0.8.0 /uv /uvx /usr/local/bin/

RUN apk add --no-cache \
    gcc \
    musl-dev \
    python3-dev \
    libffi-dev \
    openssl-dev

RUN uv venv $VIRTUAL_ENV

WORKDIR $APP_PATH

COPY ./pyproject.toml ./uv.lock ./
# ----------------------------------------------

# ----------------- Base Runtime ---------------
FROM python-base AS base-runtime

RUN apk add --no-cache \
    curl \
    libstdc++

RUN adduser --system --no-create-home appuser

USER appuser
# ----------------------------------------------

# =================== Web ======================
FROM base-builder AS web-builder

RUN --mount=type=cache,target=/root/.cache/uv \
    uv sync --frozen --no-dev --group web --no-editable --no-install-project

COPY ./src ./src

RUN --mount=type=cache,target=/root/.cache/uv \
    uv build --wheel && \
    uv pip install --no-deps dist/*.whl

FROM base-runtime AS web-runtime
COPY --from=web-builder $VIRTUAL_ENV $VIRTUAL_ENV
# ==============================================

# =================== Worker ===================
FROM base-builder AS worker-builder

RUN --mount=type=cache,target=/root/.cache/uv \
    uv sync --frozen --no-dev --group worker --no-editable --no-install-project

COPY ./src ./src

RUN --mount=type=cache,target=/root/.cache/uv \
    uv build --wheel && \
    uv pip install --no-deps dist/*.whl

FROM base-runtime AS worker-runtime
COPY --from=worker-builder $VIRTUAL_ENV $VIRTUAL_ENV
# ==============================================