idioms/Containerfile at develop · CentreForDigitalHumanities/idioms · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
FROM docker.io/library/python:3.14-slim AS python-base

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1

WORKDIR /app

RUN addgroup --system app && adduser --system --ingroup app app

FROM python-base AS db-build

COPY scripts/create-db.py ./scripts/create-db.py
COPY data/csv ./data/csv
COPY data/conversion/sql-create-tables.sql ./data/conversion/sql-create-tables.sql
COPY data/conversion/sql-create-fts.sql ./data/conversion/sql-create-fts.sql

RUN python scripts/create-db.py

FROM python-base AS base

COPY requirements.txt requirements-prod.txt ./

RUN pip install --no-cache-dir -r requirements.txt

COPY --from=db-build --chown=app:app /app/idioms.db ./idioms.db
COPY --chown=app:app CITATION.cff ./
COPY --chown=app:app metadata.json ./
COPY --chown=app:app plugins ./plugins
COPY --chown=app:app static ./static
COPY --chown=app:app templates ./templates
# We actually need the group 0 with rwx so that it can run in Openshift for the unprivileged user
RUN chown -R app:0 /app
RUN chmod g+rwx /app

USER app

EXPOSE 8001

FROM base AS local

CMD exec datasette serve . \
    --host 0.0.0.0 \
    --port 8001

FROM base AS prod

USER root

RUN pip install --no-cache-dir -r requirements-prod.txt

# https://docs.datasette.io/en/stable/performance.html#using-datasette-inspect
RUN datasette inspect idioms.db --inspect-file inspect-data.json

USER app

CMD exec datasette gunicorn \
    --immutable idioms.db \
    --inspect-file inspect-data.json \
    --host 0.0.0.0 \
    --port 8001 \
    --workers 4 \
    --metadata metadata.json \
    --template-dir templates \
    --plugins-dir plugins \
    --static static:static \
    --setting default_cache_ttl 60 \
    2>/dev/null
# Supress datasette gunicorn INFO/WARNING logs which come out in stderr stream, they have already been checked and investigated https://github.com/CentreForDigitalHumanities/k8s-rslab-apps/issues/1

# Sample runs for local and prod, unprivileged user and port simulated
# docker run --rm --name idioms -p 8001:8001 -u 1000:0 idioms:local
# docker run --rm --name idioms --env-file ./env.prod -p 8001:8001 -u 1000:0 idioms:prod
# docker exec -it idioms /bin/bash