119 lines
4 KiB
Docker
119 lines
4 KiB
Docker
# syntax=docker/dockerfile:1.15@sha256:05e0ad437efefcf144bfbf9d7f728c17818408e6d01432d9e264ef958bbd52f3
|
|
FROM ubuntu:noble-20250404@sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02 as base
|
|
ARG BASE_IMAGE_NAME=ubuntu:noble-20250404
|
|
ARG BASE_IMAGE_DIGEST=sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02
|
|
ARG TARGETARCH
|
|
|
|
LABEL org.opencontainers.image.base.name="docker.io/library/$BASE_IMAGE_NAME" \
|
|
org.opencontainers.image.base.digest="$BASE_IMAGE_DIGEST" \
|
|
org.opencontainers.image.source="https://github.com/c3nav/c3nav" \
|
|
org.opencontainers.image.url="https://c3nav.de" \
|
|
org.opencontainers.image.authors="c3nav team"
|
|
|
|
ENV DEBIAN_FRONTEND noninteractive
|
|
|
|
RUN --mount=type=cache,target=/var/cache/apt,id=apt_$TARGETARCH --mount=type=tmpfs,target=/var/lib/apt/lists \
|
|
rm /etc/apt/apt.conf.d/docker-clean && \
|
|
apt-get update && apt-get install -y --no-install-recommends \
|
|
python3.12 \
|
|
# renovate: srcname=python3.12
|
|
libpython3.12 \
|
|
# renovate: srcname=python3.12
|
|
python3.12-venv \
|
|
# renovate: srcname=python-pip
|
|
python3-pip \
|
|
# renovate: srcname=postgresql-16
|
|
libpq5 \
|
|
# renovate: srcname=postgresql-16
|
|
postgresql-client-16 \
|
|
curl \
|
|
# renovate: srcname=pcre3
|
|
libpcre3 \
|
|
# renovate: srcname=librsvg
|
|
librsvg2-2 \
|
|
# renovate: srcname=librsvg
|
|
gir1.2-rsvg-2.0 \
|
|
# renovate: srcname=cairo
|
|
libcairo2 \
|
|
libgirepository-1.0-1 \
|
|
# renovate: srcname=libmemcached
|
|
libmemcached11t64 \
|
|
gettext \
|
|
tzdata-legacy \
|
|
ca-certificates \
|
|
# renovate: srcname=libzstd
|
|
zstd=1.5.5+dfsg2-2build1.1
|
|
ENV PATH="/usr/lib/postgresql/16/bin/:$PATH"
|
|
|
|
|
|
FROM base as builder
|
|
RUN --mount=type=cache,target=/var/cache/apt,id=apt_$TARGETARCH --mount=type=tmpfs,target=/var/lib/apt/lists \
|
|
apt-get update && apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
# renovate: srcname=python3.12
|
|
python3.12-dev \
|
|
libpcre3-dev \
|
|
# renovate: srcname=postgresql-16
|
|
libpq-dev \
|
|
# renovate: srcname=cairo
|
|
libcairo2-dev \
|
|
libgirepository1.0-dev \
|
|
# renovate: srcname=libmemcached
|
|
libmemcached-dev
|
|
|
|
|
|
RUN mkdir /app
|
|
WORKDIR /app
|
|
|
|
RUN --mount=type=cache,target=/pip-cache \
|
|
--mount=type=bind,source=/src/requirements,target=/app/requirements \
|
|
python3.12 -m venv env && \
|
|
. /app/env/bin/activate && \
|
|
pip install --cache-dir /pip-cache --upgrade pip wheel && \
|
|
pip install --cache-dir /pip-cache \
|
|
-r requirements/production.txt \
|
|
-r requirements/htmlmin.txt \
|
|
-r requirements/postgres.txt \
|
|
-r requirements/redis.txt \
|
|
-r requirements/memcached.txt \
|
|
-r requirements/rsvg-pygobject.txt \
|
|
-r requirements/sentry.txt \
|
|
-r requirements/metrics.txt \
|
|
-r requirements/uwu.txt \
|
|
-r requirements/sso.txt \
|
|
-r requirements/server-asgi.txt && \
|
|
pip install --cache-dir /pip-cache uwsgi django_extensions
|
|
|
|
FROM base as final
|
|
ARG COMMIT
|
|
RUN groupadd -r -g 500 c3nav && useradd -r -u 500 -g 500 -G www-data c3nav
|
|
RUN mkdir /data /etc/c3nav && chown -R c3nav:c3nav /data /etc/c3nav
|
|
VOLUME /data
|
|
|
|
COPY --link --chown=500:500 /src /app
|
|
COPY --from=builder --chown=500:500 /app/env /app/env
|
|
COPY --chown=root:root --chmod=0755 /docker/entrypoint.sh /usr/bin/entrypoint
|
|
|
|
ENV C3NAV_DEBUG="" \
|
|
C3NAV_LOGLEVEL="INFO" \
|
|
C3NAV_DATA_DIR="/data" \
|
|
C3NAV_AUTOMIGRATE="yes" \
|
|
C3NAV_VERSION="${COMMIT}" \
|
|
MPLBACKEND="agg" \
|
|
UWSGI_WORKERS="4" \
|
|
PATH="/app/env/bin/:$PATH"
|
|
|
|
USER c3nav
|
|
WORKDIR /app
|
|
|
|
RUN /app/env/bin/python manage.py makemessages --ignore "site-packages" -l en_UW && \
|
|
/app/env/bin/python genuwu.py && \
|
|
/app/env/bin/python manage.py compilemessages --ignore "site-packages" && \
|
|
/app/env/bin/python manage.py collectstatic -l --no-input && \
|
|
/app/env/bin/python manage.py compress && \
|
|
rm -r /data/*
|
|
|
|
EXPOSE 8000 5000
|
|
#HEALTHCHECK --start-period=5s --interval=10s --timeout=1s CMD curl -f http://localhost:8000/check || exit 1
|
|
ENTRYPOINT ["/usr/bin/entrypoint"]
|
|
CMD ["web"]
|