46 lines
1.0 KiB
Docker
46 lines
1.0 KiB
Docker
# Stage 1: Builder
|
|
FROM python:3.14-slim@sha256:486b8092bfb12997e10d4920897213a06563449c951c5506c2a2cfaf591c599f AS builder
|
|
|
|
# Install uv
|
|
COPY --from=ghcr.io/astral-sh/uv:latest@sha256:4cac394b6b72846f8a85a7a0e577c6d61d4e17fe2ccee65d9451a8b3c9efb4ac /uv /usr/local/bin/uv
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy dependency files
|
|
COPY pyproject.toml uv.lock ./
|
|
|
|
# Install dependencies
|
|
RUN uv sync --frozen --no-dev --no-install-project
|
|
|
|
# Copy source code
|
|
COPY src ./src
|
|
|
|
# Install the project
|
|
RUN uv sync --frozen --no-dev
|
|
|
|
|
|
# Stage 2: Runtime
|
|
FROM python:3.14-slim@sha256:486b8092bfb12997e10d4920897213a06563449c951c5506c2a2cfaf591c599f
|
|
|
|
# Create non-root user
|
|
RUN useradd --create-home --shell /bin/bash appuser
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy virtual environment from builder
|
|
COPY --from=builder --chown=appuser:appuser /app/.venv /app/.venv
|
|
|
|
# Copy source code
|
|
COPY --from=builder --chown=appuser:appuser /app/src ./src
|
|
|
|
# Set environment
|
|
ENV PATH="/app/.venv/bin:$PATH"
|
|
ENV PORT=3000
|
|
|
|
# Switch to non-root user
|
|
USER appuser
|
|
|
|
EXPOSE 3000
|
|
|
|
CMD ["python", "-m", "grist_mcp.main"]
|