attempt 3

Author: marcoacierno

backend/Dockerfile

@@ -81,9 +81,6 @@ COPY --chown=app:app --from=build-stage ${FUNCTION_DIR}/.venv ${FUNCTION_DIR}/.v
 
 COPY --chown=app:app . ${FUNCTION_DIR}
 
-USER app
-
 RUN mkdir -p assets && .venv/bin/python manage.py collectstatic --noinput
 
-ENTRYPOINT ["/home/app/.venv/bin/gunicorn"]
-CMD [ "pycon.wsgi" ]
+ENTRYPOINT ["/entrypoint.sh"]

backend/entrypoint.sh

@@ -0,0 +1,6 @@
+source /home/app/.venv/bin/activate
+
+echo "Fixing permissions"
+chown -R app:app /tmp
+
+exec su-exec app "$@"

infrastructure/applications/pycon_backend/worker_heavy_processing.tf

@@ -23,11 +23,11 @@ resource "aws_ecs_task_definition" "heavy_processing_worker" {
       memoryReservation = 16384
       essential         = true
       entrypoint = [
-        "/home/app/.venv/bin/celery",
+        "/entrypoint.sh"
       ]
 
       command = [
-        "-A", "pycon", "worker", "-l", "info", "-Q", "heavy_processing", "--hostname", "heavyprocessing@%h", "-E"
+        "/home/app/.venv/bin/celery", "-A", "pycon", "worker", "-l", "info", "-Q", "heavy_processing", "--hostname", "heavyprocessing@%h", "-E"
       ]
 
       environment = local.env_vars
@@ -73,11 +73,6 @@ resource "aws_ecs_task_definition" "heavy_processing_worker" {
   volume {
     name = "storage"
     configure_at_launch = true
-    docker_volume_configuration {
-      driver_opts = {
-        o = "uid=999,gid=999"
-      }
-    }
   }
 
   tags                     = {}