feat: update Docker setup with new base image, enhance build workflow, and improve error logging in main application

Author: npv2k1

.dockerignore

@@ -0,0 +1 @@
+.venv

.github/workflows/build.yaml

@@ -1,64 +1,27 @@
-name: Docker Publish
+name: Docker Build
 
 on:
   push:
-    branches: ["main"]
-    # Publish semver tags as releases.
-    tags: ["v*.*.*"]
-
-env:
-  # Use docker.io for Docker Hub if empty
-  REGISTRY: ghcr.io
-  # github.repository as <account>/<repo>
-  IMAGE_NAME: ${{ github.repository }}
+    branches:
+      - main
+      - develop
+      - "feature/**"
+      - "hotfix/**"
+    tags:
+      - "v*.*.*"
+  pull_request:
+    branches:
+      - main
+      - develop
 
 jobs:
-  build:
+  docker:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
-
-      # Install the cosign tool except on PR
-
-      # Set up BuildKit Docker container builder to be able to build
-      # multi-platform images and export cache
-      # https://github.com/docker/setup-buildx-action
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3 # v3.0.0
-
-      # Login against a Docker registry except on PR
-      # https://github.com/docker/login-action
-      - name: Log into registry ${{ env.REGISTRY }}
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3 # v3.0.0
+      - uses: pnstack/actions/docker-publish@main
         with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      # Extract metadata (tags, labels) for Docker
-      # https://github.com/docker/metadata-action
-      - name: Extract Docker metadata
-        id: meta
-        uses: docker/metadata-action@v5 # v5.0.0
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-
-      # Build and push Docker image with Buildx (don't push on PR)
-      # https://github.com/docker/build-push-action
-      - name: Build and push Docker image
-        id: build-and-push
-        uses: docker/build-push-action@v5 # v5.0.0
-        with:
-          context: .
           platforms: linux/amd64,linux/arm64
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          dockerfile: Dockerfile
+          context: .
+          push_enabled: true
+          registry: ghcr.io

Dockerfile

@@ -1,45 +1,38 @@
-FROM python:3.11-slim AS base
+# Use a Python image with uv pre-installed
+FROM ghcr.io/astral-sh/uv:python3.11-bookworm
 
-# Set Python environment variables
-ENV PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONUNBUFFERED=1 \
-    PYTHONFAULTHANDLER=1 \
-    LANG=C.UTF-8 \
-    LC_ALL=C.UTF-8
-
-# Install basic dependencies
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    gcc \
-    && rm -rf /var/lib/apt/lists/*
-
-# Upgrade pip
-RUN pip install --no-cache-dir --upgrade pip
+# Install the project into `/app`
+WORKDIR /app
 
-FROM base AS builder
+# Enable bytecode compilation
+ENV UV_COMPILE_BYTECODE=1
 
-# Create and activate virtual environment
-RUN python -m venv /.venv
-ENV PATH="/.venv/bin:$PATH"
+# Copy from the cache instead of linking since it's a mounted volume
+ENV UV_LINK_MODE=copy
 
-# Install dependencies
-COPY pyproject.toml .
-RUN pip install --no-cache-dir .
+# Install the project's dependencies using the lockfile and settings
+RUN --mount=type=cache,target=/root/.cache/uv \
+  --mount=type=bind,source=uv.lock,target=uv.lock \
+  --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
+  uv sync --frozen --no-install-project --no-dev
 
-FROM base as runtime
+# Then, add the rest of the project source code and install it
+# Installing separately from its dependencies allows optimal layer caching
+ADD . /app
+RUN --mount=type=cache,target=/root/.cache/uv \
+  uv sync --frozen --no-dev
 
-# Set working directory
-WORKDIR /app
+# Place executables in the environment at the front of the path
+ENV PATH="/app/.venv/bin:$PATH"
 
-# Copy virtual environment from builder
-COPY --from=builder /.venv /.venv
-ENV PATH="/.venv/bin:$PATH"
+# Reset the entrypoint, don't invoke `uv`
+ENTRYPOINT []
 
-# Copy application code
-COPY . .
+# Run setup.py
 
-# Expose port (adjust if needed)
-EXPOSE 8000
+RUN python setup.py
 
-# Run the application
-CMD ["python", "main.py"]
+# Run the FastAPI application by default
+# Uses `fastapi dev` to enable hot-reloading when the `watch` sync occurs
+# Uses `--host 0.0.0.0` to allow access from outside the container
+CMD ["python", "main.py"]

main.py

@@ -13,7 +13,7 @@ def main() -> None:
         import src.modules.api
 
     except Exception as e:
-        print(f"Application failed to start: {e}", exc_info=True)
+        logging.error(f"Application failed to start: {e}", exc_info=True)
         raise
 
 

setup.py

@@ -0,0 +1 @@
+print("Setup.py")