|
1 | | -# syntax=docker/dockerfile:1 |
2 | | - |
3 | | -FROM alpine:3.18 |
| 1 | +# Multi-stage Dockerfile for Auto_Bangumi |
| 2 | +# Stage 1: Python base runtime |
| 3 | +FROM alpine:3.18 AS python-base |
4 | 4 |
|
5 | 5 | ENV LANG="C.UTF-8" \ |
6 | 6 | TZ=Asia/Shanghai \ |
7 | 7 | PUID=1000 \ |
8 | 8 | PGID=1000 \ |
9 | 9 | UMASK=022 \ |
10 | | - PATH="/root/.local/bin:$PATH" |
| 10 | + VENV_PATH="/opt/venv" |
| 11 | + |
| 12 | +# Install runtime system packages |
| 13 | +RUN set -ex && \ |
| 14 | + apk add --no-cache \ |
| 15 | + bash \ |
| 16 | + busybox-suid \ |
| 17 | + python3 \ |
| 18 | + py3-aiohttp \ |
| 19 | + py3-bcrypt \ |
| 20 | + curl \ |
| 21 | + su-exec \ |
| 22 | + shadow \ |
| 23 | + tini \ |
| 24 | + openssl \ |
| 25 | + tzdata && \ |
| 26 | + # Set timezone |
| 27 | + ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && \ |
| 28 | + echo $TZ > /etc/timezone |
| 29 | + |
| 30 | +# Stage 2: Build dependencies |
| 31 | +FROM python-base AS build-deps |
| 32 | + |
| 33 | +# Install build tools and dependencies |
| 34 | +RUN set -ex && \ |
| 35 | + apk add --no-cache \ |
| 36 | + build-base \ |
| 37 | + gcc \ |
| 38 | + musl-dev \ |
| 39 | + libffi-dev \ |
| 40 | + python3-dev \ |
| 41 | + rust \ |
| 42 | + cargo |
| 43 | + |
| 44 | +# Install uv package manager |
| 45 | +RUN curl -LsSf https://astral.sh/uv/install.sh | sh && \ |
| 46 | + mv /root/.cargo/bin/uv /usr/local/bin/uv && \ |
| 47 | + uv --version |
| 48 | + |
| 49 | +# Stage 3: Python virtual environment |
| 50 | +FROM build-deps AS python-venv |
| 51 | + |
| 52 | +ENV PATH="${VENV_PATH}/bin:${PATH}" |
11 | 53 |
|
12 | 54 | WORKDIR /app |
13 | 55 |
|
14 | 56 | # Copy Python project files |
15 | 57 | COPY backend/pyproject.toml backend/uv.lock ./ |
16 | 58 |
|
| 59 | +# Create virtual environment and install dependencies |
17 | 60 | RUN set -ex && \ |
18 | | - apk add --no-cache \ |
19 | | - bash \ |
20 | | - busybox-suid \ |
21 | | - python3 \ |
22 | | - python3-dev \ |
23 | | - py3-aiohttp \ |
24 | | - py3-bcrypt \ |
25 | | - curl \ |
26 | | - gcc \ |
27 | | - musl-dev \ |
28 | | - libffi-dev \ |
29 | | - su-exec \ |
30 | | - shadow \ |
31 | | - tini \ |
32 | | - openssl \ |
33 | | - tzdata \ |
34 | | - rust \ |
35 | | - cargo && \ |
36 | | - # Install uv |
37 | | - curl -LsSf https://astral.sh/uv/install.sh | sh && \ |
38 | | - # Verify uv installation and show version |
39 | | - uv --version && \ |
40 | 61 | # Check if lock file exists and is readable |
41 | 62 | ls -la uv.lock && \ |
| 63 | + # Create virtual environment |
| 64 | + python3 -m venv ${VENV_PATH} && \ |
42 | 65 | # Install dependencies using uv |
43 | 66 | uv sync --frozen --no-dev && \ |
44 | | - # Remove build dependencies to reduce image size |
45 | | - apk del \ |
46 | | - rust \ |
47 | | - cargo \ |
48 | | - gcc \ |
49 | | - musl-dev \ |
50 | | - libffi-dev \ |
51 | | - python3-dev && \ |
52 | | - # Add user |
| 67 | + # Clear cache |
| 68 | + rm -rf /root/.cache |
| 69 | + |
| 70 | +# Stage 4: Final runtime image |
| 71 | +FROM python-base AS final |
| 72 | + |
| 73 | +ENV PATH="/root/.local/bin:${VENV_PATH}/bin:${PATH}" |
| 74 | + |
| 75 | +WORKDIR /app |
| 76 | + |
| 77 | +# Copy virtual environment from build stage |
| 78 | +COPY --from=python-venv --chown=root:root ${VENV_PATH} ${VENV_PATH} |
| 79 | + |
| 80 | +# Add user |
| 81 | +RUN set -ex && \ |
53 | 82 | mkdir -p /home/ab && \ |
54 | 83 | addgroup -S ab -g 911 && \ |
55 | | - adduser -S ab -G ab -h /home/ab -s /sbin/nologin -u 911 && \ |
56 | | - # Clear |
57 | | - rm -rf \ |
58 | | - /root/.cache \ |
59 | | - /root/.local \ |
60 | | - /tmp/* |
| 84 | + adduser -S ab -G ab -h /home/ab -s /sbin/nologin -u 911 |
61 | 85 |
|
| 86 | +# Copy application code and scripts |
62 | 87 | COPY --chmod=755 backend/src/. . |
63 | 88 | COPY --chmod=755 entrypoint.sh /entrypoint.sh |
64 | 89 |
|
| 90 | +# Set proper permissions |
| 91 | +RUN chown -R ab:ab /app /home/ab |
| 92 | + |
65 | 93 | ENTRYPOINT ["tini", "-g", "--", "/entrypoint.sh"] |
66 | 94 |
|
67 | 95 | EXPOSE 7892 |
|
0 commit comments