chore(ci): publish to github container registry (#6)

Author: hspedro

.github/workflows/publish-docker.yml

@@ -0,0 +1,47 @@
+name: Publish Docker image
+
+on:
+  workflow_dispatch:
+
+jobs:
+  push_to_registry:
+    name: Push Docker image to GitHub Container Registry
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=sha,format=short
+            latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/publish.yml

@@ -12,10 +12,14 @@ jobs:
     needs: build
     uses: ./.github/workflows/test.yml
     with:
-      python-version: '3.9'
+      python-version: '3.10'
       upload-coverage: true
 
-  publish:
+  publish-docker:
+    needs: [build, test]
+    uses: ./.github/workflows/publish-docker.yml
+
+  publish-pypi:
     needs: [build, test]
     runs-on: ubuntu-latest
     steps:

Dockerfile

@@ -1,56 +1,36 @@
-# Base image with Python
-FROM python:3.10-slim AS base
+# Build stage
+FROM python:3.10-slim AS builder
 
-# Set working directory
 WORKDIR /app
 
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
+# Install a specific version of Poetry that supports --no-dev
+RUN pip install poetry==2.1.1
 
-# Install Poetry
-RUN curl -sSL https://install.python-poetry.org | python3 - && \
-    ln -s /root/.local/bin/poetry /usr/local/bin/
+# Copy project files
+COPY pyproject.toml poetry.lock* README.md ./
+COPY babeltron ./babeltron
 
-# Copy Poetry configuration files
-COPY README.md pyproject.toml poetry.lock* ./
+# Configure poetry to not use a virtual environment
+RUN poetry config virtualenvs.create false \
+    && poetry install --without dev --no-interaction --no-ansi
 
-# Copy application code
-COPY babeltron/ ./babeltron/
+FROM python:3.10-slim
 
-# Configure Poetry to not use virtualenvs in Docker
-RUN poetry config virtualenvs.create false
+WORKDIR /app
 
-# Install dependencies
-RUN poetry install --without dev --no-interaction --no-ansi
+# Copy Python dependencies from builder stage
+COPY --from=builder /usr/local/lib/python3.10/site-packages /usr/local/lib/python3.10/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
+
+# Copy application code
+COPY --from=builder /app/babeltron ./babeltron
 
-# Set environment variables
-ENV MODEL_PATH=/models
 ENV PYTHONPATH=/app
-ENV WORKERS=1
-ENV HOST=0.0.0.0
-ENV PORT=8000
-ENV MODEL_COMPRESSION_ENABLED=true
+ENV MODEL_PATH=/models
 
-# Expose the port the app runs on
-EXPOSE 8000
+# Create a non-root user
+RUN useradd -m appuser
+USER appuser
 
-# Create a script to start the application with the specified number of workers
-RUN echo '#!/bin/bash\n\
-echo "Starting with $WORKERS workers"\n\
-echo "Model compression: $MODEL_COMPRESSION_ENABLED"\n\
-if [ "$WORKERS" -eq "1" ]; then\n\
-  # Single worker mode uses uvicorn directly\n\
-  exec uvicorn babeltron.app.main:app --host $HOST --port $PORT\n\
-else\n\
-  # Multi-worker mode uses gunicorn with uvicorn workers\n\
-  exec gunicorn babeltron.app.main:app \\\n\
-    --workers $WORKERS \\\n\
-    --worker-class uvicorn.workers.UvicornWorker \\\n\
-    --bind $HOST:$PORT\n\
-fi' > /app/start.sh && chmod +x /app/start.sh
-
-# Command to run the application
-CMD ["/app/start.sh"]
+EXPOSE 8000
+CMD ["uvicorn", "babeltron.app.main:app", "--host", "0.0.0.0", "--port", "8000"]

babeltron/app/routers/translate.py

@@ -80,9 +80,7 @@ class TranslationResponse(BaseModel):
 )
 @track_dynamic_translation_metrics()
 async def translate(request: TranslationRequest):
-    # Get current span from context
     current_span = trace.get_current_span()
-    # Add request attributes to the current span
     current_span.set_attribute("src_lang", request.src_lang)
     current_span.set_attribute("tgt_lang", request.tgt_lang)
     current_span.set_attribute("text_length", len(request.text))