Improve Dockerfile and build

Author: medihack

Dockerfile

@@ -1,8 +1,16 @@
 # Ideas from https://docs.astral.sh/uv/guides/integration/docker/
+# and https://hynek.me/articles/docker-uv/
 
-FROM python:3.12-bullseye AS builder-base
+FROM python:3.13-bookworm AS builder-base
 
-ARG PROJECT_VERSION
+ENV PYTHONUNBUFFERED=1 \
+  PYTHONDONTWRITEBYTECODE=1 \
+  UV_LINK_MODE=copy \
+  UV_COMPILE_BYTECODE=1 \
+  UV_PYTHON_DOWNLOADS=never \
+  PATH="/app/.venv/bin:$PATH" \
+  # There is no git during image build so we need to provide a fake version
+  UV_DYNAMIC_VERSIONING_BYPASS=0.0.0
 
 # Install dependencies for the `psql` command.
 # Must match the version of the postgres service in the compose file!
@@ -13,25 +21,16 @@ RUN apt-get update \
   postgresql-client-17 \
   && rm -rf /var/lib/apt/lists/*
 
-ENV PYTHONUNBUFFERED=1 \
-  PYTHONDONTWRITEBYTECODE=1
-
 COPY --from=ghcr.io/astral-sh/uv:0.7.2 /uv /uvx /bin/
 
-ENV UV_COMPILE_BYTECODE=1 \
-  UV_LINK_MODE=copy
-
-# There is no git during image build so we need to provide a fake version
-ENV UV_DYNAMIC_VERSIONING_BYPASS=0.0.0
-
-ENV PATH="/app/.venv/bin:$PATH"
-
 WORKDIR /app
 
-
-# development image
+###
+# Development image
+###
 FROM builder-base AS development
 
+# Install dependencies without project itself
 RUN --mount=type=cache,target=/root/.cache/uv \
   --mount=type=bind,source=uv.lock,target=uv.lock \
   --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
@@ -41,22 +40,29 @@ RUN playwright install --with-deps chromium
 
 ADD . /app
 
+# Install project itself
 RUN --mount=type=cache,target=/root/.cache/uv \
-  uv sync --frozen
+  uv sync --locked
 
+ARG PROJECT_VERSION
 ENV PROJECT_VERSION=${PROJECT_VERSION}
 
-# production image
+###
+# Production image
+###
 FROM builder-base AS production
 
+# Install dependencies without dev and project itself
 RUN --mount=type=cache,target=/root/.cache/uv \
   --mount=type=bind,source=uv.lock,target=uv.lock \
   --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
   uv sync --frozen --no-install-project --no-dev
 
 ADD . /app
 
+# Install project itself
 RUN --mount=type=cache,target=/root/.cache/uv \
-  uv sync --frozen --no-dev
+  uv sync --locked --no-dev
 
+ARG PROJECT_VERSION
 ENV PROJECT_VERSION=${PROJECT_VERSION}

docker-compose.dev.yml

@@ -2,6 +2,7 @@ x-app: &default-app
   image: example_project_dev:latest
   build:
     target: development
+  pull_policy: build
   volumes:
     - .:/app
     - /app/.venv
@@ -19,7 +20,6 @@ services:
 
   web:
     <<: *default-app
-    pull_policy: build
     ports:
       - ${WEB_DEV_PORT:-8000}:8000
       - ${REMOTE_DEBUGGING_PORT:-5678}:5678