team-3/docker/Dockerfile

# syntax=docker/dockerfile:1.15@sha256:05e0ad437efefcf144bfbf9d7f728c17818408e6d01432d9e264ef958bbd52f3
FROM ubuntu:noble-20250404@sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02 as base
ARG BASE_IMAGE_NAME=ubuntu:noble-20250404
ARG BASE_IMAGE_DIGEST=sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02
ARG TARGETARCH

LABEL org.opencontainers.image.base.name="docker.io/library/$BASE_IMAGE_NAME" \
      org.opencontainers.image.base.digest="$BASE_IMAGE_DIGEST" \
      org.opencontainers.image.source="https://github.com/c3nav/c3nav" \
      org.opencontainers.image.url="https://c3nav.de" \
      org.opencontainers.image.authors="c3nav team"

ENV DEBIAN_FRONTEND noninteractive

RUN --mount=type=cache,target=/var/cache/apt,id=apt_$TARGETARCH --mount=type=tmpfs,target=/var/lib/apt/lists \
    rm /etc/apt/apt.conf.d/docker-clean && \
    apt-get update && apt-get install -y --no-install-recommends \
    python3.12 \
    # renovate: srcname=python3.12
    libpython3.12 \
    # renovate: srcname=python3.12
    python3.12-venv \
    # renovate: srcname=python-pip
    python3-pip \
    # renovate: srcname=postgresql-16
    libpq5 \
    # renovate: srcname=postgresql-16
    postgresql-client-16 \
    curl \
    # renovate: srcname=pcre3
    libpcre3 \
    # renovate: srcname=librsvg
    librsvg2-2 \
    # renovate: srcname=librsvg
    gir1.2-rsvg-2.0 \
    # renovate: srcname=cairo
    libcairo2 \
    libgirepository-1.0-1 \
    # renovate: srcname=libmemcached
    libmemcached11t64 \
    gettext \
    tzdata-legacy \
    ca-certificates \
    # renovate: srcname=libzstd
    zstd=1.5.5+dfsg2-2build1.1
ENV PATH="/usr/lib/postgresql/16/bin/:$PATH"


FROM base as builder
RUN --mount=type=cache,target=/var/cache/apt,id=apt_$TARGETARCH --mount=type=tmpfs,target=/var/lib/apt/lists \
    apt-get update && apt-get install -y --no-install-recommends \
    build-essential \
    # renovate: srcname=python3.12
    python3.12-dev \
    libpcre3-dev \
    # renovate: srcname=postgresql-16
    libpq-dev \
    # renovate: srcname=cairo
    libcairo2-dev \
    libgirepository1.0-dev \
    # renovate: srcname=libmemcached
    libmemcached-dev


RUN mkdir /app
WORKDIR /app

RUN --mount=type=cache,target=/pip-cache \
    --mount=type=bind,source=/src/requirements,target=/app/requirements \
    python3.12 -m venv env && \
    . /app/env/bin/activate && \
    pip install --cache-dir /pip-cache --upgrade pip wheel && \
    pip install --cache-dir /pip-cache \
    -r requirements/production.txt \
    -r requirements/htmlmin.txt \
    -r requirements/postgres.txt \
    -r requirements/redis.txt \
    -r requirements/memcached.txt \
    -r requirements/rsvg-pygobject.txt \
    -r requirements/sentry.txt \
    -r requirements/metrics.txt \
    -r requirements/uwu.txt \
    -r requirements/sso.txt \
    -r requirements/server-asgi.txt && \
    pip install --cache-dir /pip-cache uwsgi django_extensions

FROM base as final
ARG COMMIT
RUN groupadd -r -g 500 c3nav && useradd -r -u 500 -g 500 -G www-data c3nav
RUN mkdir /data /etc/c3nav && chown -R c3nav:c3nav /data /etc/c3nav
VOLUME /data

COPY --link --chown=500:500 /src /app
COPY --from=builder --chown=500:500 /app/env /app/env
COPY --chown=root:root --chmod=0755 /docker/entrypoint.sh /usr/bin/entrypoint

ENV C3NAV_DEBUG="" \
    C3NAV_LOGLEVEL="INFO" \
    C3NAV_DATA_DIR="/data" \
    C3NAV_AUTOMIGRATE="yes" \
    C3NAV_VERSION="${COMMIT}" \
    MPLBACKEND="agg" \
    UWSGI_WORKERS="4" \
    PATH="/app/env/bin/:$PATH"

USER c3nav
WORKDIR /app

RUN /app/env/bin/python manage.py makemessages --ignore "site-packages" -l en_UW && \
    /app/env/bin/python genuwu.py && \
    /app/env/bin/python manage.py compilemessages --ignore "site-packages" && \
    /app/env/bin/python manage.py collectstatic -l --no-input && \
    /app/env/bin/python manage.py compress && \
    rm -r /data/*

EXPOSE 8000 5000
#HEALTHCHECK --start-period=5s --interval=10s --timeout=1s CMD curl -f http://localhost:8000/check || exit 1
ENTRYPOINT ["/usr/bin/entrypoint"]
CMD ["web"]