openslides-backend/Dockerfile at main · hjanott/openslides-backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
ARG CONTEXT=prod

FROM python:3.12.9-slim-bookworm AS base

## Setup
ARG CONTEXT
ARG REQUIREMENTS_FILE_OVERWRITE=""
WORKDIR /app
ENV APP_CONTEXT=${CONTEXT}

### Query based on context value
RUN CONTEXT_INSTALLS=$(case "$APP_CONTEXT" in \
    tests)  echo "make vim bash-completion";; \
    dev)    echo "make vim bash-completion";; \
    *)      echo "libc-dev" ;; esac) && \
    IGNORE_INSTALL_RECOMMENDS=${prod:+"--no-install-recommends"} && \
    apt-get -y update && apt-get -y upgrade && apt-get install ${IGNORE_INSTALL_RECOMMENDS} -y \
    curl \
    git \
    gcc \
    libpq-dev \
    libmagic1 \
    mime-support \
    ncat \
    postgresql-client \
    ${CONTEXT_INSTALLS} && \
    rm -rf /var/lib/apt/lists/*

### Requirements file will be autoselected, unless an overwrite is given via ARG REQUIEREMENTS_FILE_OVERWRITE
COPY requirements/ requirements/
RUN REQUIREMENTS_FILE=$(case "$APP_CONTEXT" in \
    tests) echo "requirements_development.txt";; \
    dev)   echo "requirements_development.txt";; \
    *)     echo "requirements_production.txt" ;; esac) && \
    REQUIREMENTS_FILE=${REQUIEREMENTS_FILE_OVERWRITE:-$REQUIREMENTS_FILE} && \
    . requirements/export_service_commits.sh && pip install --no-cache-dir --requirement requirements/${REQUIREMENTS_FILE}

ENV PYTHONPATH=/app

ENV EMAIL_HOST=postfix
ENV EMAIL_PORT=25
ENV EMAIL_CONNECTION_SECURITY=NONE
ENV EMAIL_TIMEOUT=5
ENV EMAIL_ACCEPT_SELF_SIGNED_CERTIFICATE=false
ENV DEFAULT_FROM_EMAIL=noreply@example.com

## External Information
LABEL org.opencontainers.image.title="OpenSlides Backend Service"
LABEL org.opencontainers.image.description="Backend service for OpenSlides which provides actions and presenters."
LABEL org.opencontainers.image.licenses="MIT"
LABEL org.opencontainers.image.source="https://github.com/OpenSlides/openslides-backend"

EXPOSE 9002
EXPOSE 9003

## Command
COPY ./dev/command.sh ./
RUN chmod +x command.sh
CMD ["./command.sh"]

HEALTHCHECK CMD curl --fail http://localhost:9002/system/action/health/ || curl --fail http://localhost:9003/system/presenter/health/ || exit 1

#HEALTHCHECK --interval=5m --timeout=2m --start-period=45s \
#   CMD (curl -f --retry 6 --max-time 5 --retry-delay 10 --retry-max-time 60 "http://localhost:9002/system/action/health/xxx" && curl -f --retry 6 --max-time 5 --retry-delay 10 --retry-max-time 60 "http://localhost:9003/system/presenter/health/") || bash -c 'kill -s 15 -1 && (sleep 10; kill -s 9 -1)'

ENTRYPOINT ["./entrypoint.sh"]

# Development Image
FROM base AS dev

COPY dev/.bashrc .
COPY dev/cleanup.sh .
COPY dev/run-lint.sh ./dev/

# Copy files which are mounted to make the full stack work
COPY scripts scripts
COPY cli cli
COPY data data
COPY meta meta

COPY Makefile .
COPY setup.cfg .
COPY dev/entrypoint.sh ./

RUN chmod 777 -R .
ENV OPENSLIDES_DEVELOPMENT=1

EXPOSE 5678

STOPSIGNAL SIGKILL

# Test Image (same as dev)
FROM dev AS tests

# Production Image
FROM base AS prod

# This disables root access for the enduser, which could pose a security risk
RUN adduser --system --no-create-home appuser

COPY scripts scripts
COPY cli/create_schema.py cli/create_schema.py
COPY entrypoint.sh ./
COPY openslides_backend openslides_backend
COPY data data
COPY meta meta

RUN chown appuser ./scripts/ && \
 chown appuser ./entrypoint.sh && \
 chown appuser ./openslides_backend && \
 chown appuser ./data && \
 chown appuser ./meta && \
 chown appuser ./command.sh

ARG VERSION=dev
RUN echo "$VERSION" > openslides_backend/version.txt

USER appuser