37 أسطر
1000 B
Docker
37 أسطر
1000 B
Docker
FROM python:3.12-slim
|
|
|
|
ARG RELEASE_SHA=local
|
|
|
|
# curl is required by the HEALTHCHECK below; everything else stays out of the image.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
PIP_NO_CACHE_DIR=1 \
|
|
RELEASE_SHA=${RELEASE_SHA} \
|
|
PORT=8080
|
|
|
|
WORKDIR /app
|
|
|
|
# Dependencies first: this layer is cached and only rebuilt when
|
|
# requirements.txt changes, not on every code edit.
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
# Application code last — the layer that changes most often.
|
|
COPY main.py .
|
|
|
|
# Run as an unprivileged user.
|
|
RUN useradd --create-home --uid 10001 appuser \
|
|
&& chown -R appuser:appuser /app
|
|
USER appuser
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD curl -f http://localhost:8080/health || exit 1
|
|
|
|
CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8080"]
|