28 lines
865 B
Docker
28 lines
865 B
Docker
|
# Use an official Python runtime as a parent image
|
||
|
|
FROM python:3.11-slim-buster
|
||
|
|
|
||
|
|
# permissions and nonroot user for tightened security
|
||
|
|
RUN adduser --disabled-login nonroot
|
||
|
|
RUN mkdir /home/app/ && chown -R nonroot:nonroot /home/app
|
||
|
|
RUN mkdir -p /var/log/flask-app && touch /var/log/flask-app/flask-app.err.log && touch /var/log/flask-app/flask-app.out.log
|
||
|
|
RUN chown -R nonroot:nonroot /var/log/flask-app
|
||
|
|
WORKDIR /home/app
|
||
|
|
USER nonroot
|
||
|
|
|
||
|
|
# copy all the files to the container
|
||
|
|
COPY --chown=nonroot:nonroot . .
|
||
|
|
|
||
|
|
# venv
|
||
|
|
ENV VIRTUAL_ENV=/home/app/venv
|
||
|
|
|
||
|
|
# python setup
|
||
|
|
RUN python -m venv $VIRTUAL_ENV
|
||
|
|
ENV PATH="$VIRTUAL_ENV/bin:$PATH"
|
||
|
|
RUN export FLASK_APP=src/app.py
|
||
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
||
|
|
|
||
|
|
# define the port number the container should expose
|
||
|
|
EXPOSE 8000
|
||
|
|
|
||
|
|
CMD ["gunicorn", "-w", "4", "-b", "0.0.0.0:8000", "app:app"]
|