33 lines
838 B
Docker
33 lines
838 B
Docker
FROM python:3.12-slim-bookworm
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends curl ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/local/bin/
|
|
|
|
WORKDIR /app
|
|
|
|
COPY pyproject.toml README.md ./
|
|
COPY guarddog_nexus/ guarddog_nexus/
|
|
|
|
RUN uv pip install . --system
|
|
RUN uv pip install --system "guarddog>=2.10.0"
|
|
|
|
RUN mkdir -p /data /tmp/guarddog-nexus
|
|
|
|
RUN groupadd -r app && useradd -r -g app app && \
|
|
chown -R app:app /app /data /tmp/guarddog-nexus
|
|
|
|
USER app
|
|
|
|
ENV DATABASE_PATH=/data/guarddog.db
|
|
ENV TEMP_DIR=/tmp/guarddog-nexus
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=15s --retries=3 \
|
|
CMD curl -sf http://localhost:8080/health/dependencies || exit 1
|
|
|
|
CMD ["python", "-m", "guarddog_nexus.main"]
|