43 lines
1.1 KiB
Docker
43 lines
1.1 KiB
Docker
|
# build stage — fetches and builds Honcho from source
|
||
|
|
# Using buildkit cache mounts for speed across rebuilds
|
||
|
|
FROM python:3.13-slim-bookworm AS builder
|
||
|
|
|
||
|
|
RUN apt-get update && \
|
||
|
|
apt-get install -y --no-install-recommends git && \
|
||
|
|
rm -rf /var/lib/apt/lists/*
|
||
|
|
|
||
|
|
COPY --from=ghcr.io/astral-sh/uv:0.9.24 /uv /bin/uv
|
||
|
|
|
||
|
|
# Clone Honcho at a pinned commit for reproducibility
|
||
|
|
ARG HONCHO_REPO=https://github.com/plastic-labs/honcho
|
||
|
|
ARG HONCHO_REF=main
|
||
|
|
RUN git clone --depth 1 --branch ${HONCHO_REF} ${HONCHO_REPO} /app
|
||
|
|
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
ENV UV_COMPILE_BYTECODE=1
|
||
|
|
ENV UV_LINK_MODE=copy
|
||
|
|
|
||
|
|
RUN --mount=type=cache,target=/root/.cache/uv \
|
||
|
|
uv sync --frozen --no-group dev
|
||
|
|
|
||
|
|
# --- runtime stage ---
|
||
|
|
FROM python:3.13-slim-bookworm
|
||
|
|
|
||
|
|
RUN groupadd --system app && \
|
||
|
|
useradd --system --gid app --create-home app
|
||
|
|
|
||
|
|
COPY --from=builder /app /app
|
||
|
|
COPY --from=builder /root/.cache/uv /root/.cache/uv
|
||
|
|
|
||
|
|
WORKDIR /app
|
||
|
|
ENV PATH="/app/.venv/bin:$PATH"
|
||
|
|
ENV HOME=/app
|
||
|
|
|
||
|
|
COPY --chown=app:app config.toml /app/config.toml
|
||
|
|
|
||
|
|
USER app
|
||
|
|
EXPOSE 8000
|
||
|
|
|
||
|
|
CMD ["fastapi", "run", "--host", "0.0.0.0", "src/main.py"]
|