lock from to image version and use tmp to copy/install packages

Signed-off-by: Greg Werner <[email protected]>

Author: jgwerner

Dockerfile

@@ -1,23 +1,28 @@
-FROM jupyter/minimal-notebook:latest
+FROM jupyter/minimal-notebook:45bfe5a474fa
+
+ARG PGWEB_VERSION=0.11.6
 
 USER root
 RUN apt-get update \
+ && apt-get upgrade -y \
  && apt-get install -y \
     curl \
     unzip \
-    wget
+    wget \
+ && apt-get clean \
+ && rm -rf /var/lib/apt/lists/*
 
 # install pgweb
-ENV PGWEB_VERSION=0.11.6
+ENV PGWEB_VERSION="${PGWEB_VERSION}"
 RUN wget -q "https://github.com/sosedoff/pgweb/releases/download/v${PGWEB_VERSION}/pgweb_linux_amd64.zip" \
  && unzip pgweb_linux_amd64.zip -d /usr/bin \
  && mv /usr/bin/pgweb_linux_amd64 /usr/bin/pgweb
 
 # setup package, enable classic extension, build lab extension
 USER "${NB_USER}"
-COPY . "${HOME}"/
-COPY requirements.txt "${HOME}"/
-WORKDIR "${HOME}"
+RUN mkdir -p "/${HOME}/jupyter-pgweb-proxy"
+COPY . "/${HOME}/jupyter-pgweb-proxy"
+WORKDIR "/${HOME}/jupyter-pgweb-proxy"
 RUN python3 -m pip install .
 RUN python3 -m pip install -r requirements.txt \
  && jupyter serverextension enable --sys-prefix jupyter_server_proxy \
@@ -29,3 +34,5 @@ USER root
 RUN fix-permissions /etc/jupyter
 
 USER "${NB_USER}"
+
+WORKDIR "${HOME}"

jupyter_notebook_config.py

@@ -10,7 +10,15 @@
     "headers": {"Content-Security-Policy": "frame-ancestors 'self' *"},
     "cookie_options": {"SameSite": "None", "Secure": True},
 }
+
+# allows running the notebook as root
 c.NotebookApp.allow_root = True
+
+# accepts any origin by default, change to add restrictions
 c.NotebookApp.allow_origin = '*'
+
+# add a token if you would like to run this notebook on a public network
 c.NotebookApp.token = ''
+
+# forward to jupyterlab by default
 c.NotebookApp.default_url = '/lab'