docker-base/Dockerfile at 5d0ff17afa2abf74554038a9582a91b9bd9175e0 · WeblateOrg/docker-base · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
# Copyright © Michal Čihař <michal@weblate.org>
#
# SPDX-License-Identifier: MIT

FROM ubuntu:oracular-20241120
ARG TARGETARCH

ENV UV_VERSION=0.6.8
ENV PYVERSION=3.13

LABEL name="Weblate Base"
LABEL maintainer="Michal Čihař <michal@cihar.com>"
LABEL org.opencontainers.image.url="https://weblate.org/"
LABEL org.opencontainers.image.documentation="https://docs.weblate.org/en/latest/admin/install/docker.html"
LABEL org.opencontainers.image.source="https://github.com/WeblateOrg/docker-base"
LABEL org.opencontainers.image.author="Michal Čihař <michal@weblate.org>"
LABEL org.opencontainers.image.vendor="Weblate"
LABEL org.opencontainers.image.title="Weblate Base Image"
LABEL org.opencontainers.image.description="A web-based continuous localization system with tight version control integration"
LABEL org.opencontainers.image.licenses="MIT"


SHELL ["/bin/bash", "-o", "pipefail", "-x", "-c"]

# Add user early to get a consistent userid
# - the root group so it can run with any uid
# - the tty group for /dev/std* access
# - see https://github.com/WeblateOrg/docker/issues/326 and https://github.com/moby/moby/issues/31243#issuecomment-406879017
RUN \
  userdel --remove ubuntu \
  && useradd --uid 1000 --shell /bin/sh --user-group weblate --groups root,tty \
  && mkdir -p /home/weblate/.ssh \
  && touch /home/weblate/.ssh/authorized_keys \
  && chown -R weblate:weblate /home/weblate \
  && chmod 700 /home/weblate/.ssh \
  && install -d -o weblate -g weblate -m 755 /app/data \
  && install -d -o weblate -g weblate -m 755 /app/cache

# Configure utf-8 locales to make sure Python
# correctly handles unicode filenames, configure settings
ENV LANG=en_US.UTF-8
ENV LC_ALL=en_US.UTF-8
# Home directory
ENV HOME=/home/weblate
# Avoid Python buffering stdout and delaying logs
ENV PYTHONUNBUFFERED=1
# Add virtualenv to path
ENV PATH=/app/venv/bin:/opt/tools/bin:/usr/local/bin:/usr/bin:/bin

# Debian packages pins

# renovate: repo=https://ppa.launchpadcontent.net/git-core/ppa/ubuntu release=oracular depName=git
ENV GIT_VERSION="1:2.49.0-0ubuntu1~ubuntu24.10.1"
# renovate: repo=https://archive.ubuntu.com/ubuntu release=oracular depName=ca-certificates
ENV CA_VERSION="20240203"
# renovate: repo=https://archive.ubuntu.com/ubuntu release=oracular depName=curl
ENV CURL_VERSION="8.9.1-2ubuntu2.2"
# renovate: repo=https://archive.ubuntu.com/ubuntu release=oracular depName=openssh-client
ENV OPENSSH_VERSION="1:9.7p1-7ubuntu4.2"
# oracular-pgpg seems empty use noble-pgdg instead
# renovate: repo=https://apt.postgresql.org/pub/repos/apt release=noble-pgdg depName=postgresql-client-17
ENV POSTGRESQL_VERSION="17.4-1.pgdg24.04+2"

# Install dependencies
# hadolint ignore=DL3008,DL3013,SC2046,DL3003
RUN \
  export DEBIAN_FRONTEND=noninteractive \
  && apt-get update \
  && apt-get upgrade -y \
  && apt-get install --no-install-recommends -y \
    nginx-light \
    ruby-licensee \
    openssh-client="${OPENSSH_VERSION}" \
    ca-certificates="${CA_VERSION}" \
    curl="${CURL_VERSION}" \
    gir1.2-pango-1.0 \
    gir1.2-rsvg-2.0 \
    libxmlsec1-openssl \
    libjpeg62 \
    libmariadb3 \
    gettext \
    gnupg \
    subversion \
    file \
    locales \
    libldap-common \
    libcairo-gobject2 \
    libenchant-2-2 \
    "python${PYVERSION}-dev" \
    unzip \
    xz-utils \
  && c_rehash \
  && echo "en_US.UTF-8 UTF-8" > /etc/locale.gen \
  && /usr/sbin/locale-gen \
  && install -d /etc/apt/keyrings \
  && curl -o /etc/apt/keyrings/apt.postgresql.org.asc --fail https://www.postgresql.org/media/keys/ACCC4CF8.asc \
  && echo "deb [signed-by=/etc/apt/keyrings/apt.postgresql.org.asc] https://apt.postgresql.org/pub/repos/apt noble-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
  && curl -o /etc/apt/keyrings/git-core.launchpad.net.asc --fail 'https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe363c90f8f1b6217' \
  && echo "deb [signed-by=/etc/apt/keyrings/git-core.launchpad.net.asc] https://ppa.launchpadcontent.net/git-core/ppa/ubuntu oracular main" > /etc/apt/sources.list.d/git.list \
  && apt-get update \
  && apt-get install --no-install-recommends -y \
    postgresql-client-17="${POSTGRESQL_VERSION}" \
    git="${GIT_VERSION}" \
    git-svn \
  && apt-get clean \
  && rm -rf /root/.cache /tmp/* /var/lib/apt/lists/*

# Install uv
RUN curl -LsSf https://astral.sh/uv/${UV_VERSION}/install.sh | env UV_UNMANAGED_INSTALL="/usr/local/bin" sh

# Install supervisor and gunicorn to /opt/tools
RUN export UV_NO_CACHE=1 && uv venv /opt/tools
COPY --link requirements.txt /opt/tools/src/requirements.txt
# hadolint ignore=SC1091
RUN export UV_NO_CACHE=1 && \
    source /opt/tools/bin/activate && \
    uv pip install -r /opt/tools/src/requirements.txt