/
Dockerfile
105 lines (79 loc) · 3.43 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
FROM metabrainz/python:3.11-20231006 as critiquebrainz-base
ENV PYTHONUNBUFFERED 1
ENV DOCKERIZE_VERSION v0.6.1
RUN wget https://github.com/jwilder/dockerize/releases/download/$DOCKERIZE_VERSION/dockerize-linux-amd64-$DOCKERIZE_VERSION.tar.gz \
&& tar -C /usr/local/bin -xzvf dockerize-linux-amd64-$DOCKERIZE_VERSION.tar.gz
RUN apt-get update \
&& apt-get install -y --no-install-recommends \
build-essential \
ca-certificates \
cron \
git \
libpq-dev \
libffi-dev \
libssl-dev \
libxml2-dev \
libxslt1-dev \
rsync \
&& rm -rf /var/lib/apt/lists/*
# PostgreSQL client
RUN curl https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
ENV PG_MAJOR 12
RUN echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" $PG_MAJOR > /etc/apt/sources.list.d/pgdg.list
RUN apt-get update \
&& apt-get install -y --no-install-recommends postgresql-client-$PG_MAJOR \
&& rm -rf /var/lib/apt/lists/*
# Node
ARG NODE_MAJOR=20
RUN mkdir -p /etc/apt/keyrings \
&& curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
&& echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \
&& apt-get update \
&& apt-get install -y nodejs \
&& rm -rf /var/lib/apt/lists/*
RUN pip install --upgrade pip==21.0.1
RUN pip install --no-cache-dir uWSGI==2.0.23
RUN mkdir /code
WORKDIR /code
# Python dependencies
COPY ./requirements.txt /code/
RUN pip install --no-cache-dir -r requirements.txt
RUN useradd --create-home --shell /bin/bash critiquebrainz
FROM critiquebrainz-base as critiquebrainz-dev
COPY . /code/
# Compile translations
RUN pybabel compile -d critiquebrainz/frontend/translations
FROM critiquebrainz-base as critiquebrainz-prod
############
# Services #
############
# runit service files
# All services are created with a `down` file, preventing them from starting
# rc.local removes the down file for the specific service we want to run in a container
# http://smarden.org/runit/runsv.8.html
COPY ./docker/rc.local /etc/rc.local
# UWSGI
COPY ./docker/uwsgi/consul-template-uwsgi.conf /etc/consul-template-uwsgi.conf
COPY ./docker/uwsgi/uwsgi.service /etc/service/uwsgi/run
COPY ./docker/uwsgi/uwsgi.ini /etc/uwsgi/uwsgi.ini
RUN touch /etc/service/uwsgi/down
# cron jobs
COPY ./docker/cron/consul-template-cron-config.conf /etc/consul-template-cron-config.conf
COPY ./docker/cron/cron-config.service /etc/service/cron-config/run
COPY ./docker/cron/crontab /etc/cron.d/critiquebrainz
RUN chmod 0644 /etc/cron.d/critiquebrainz
RUN touch /etc/service/cron/down
RUN touch /etc/service/cron-config/down
RUN touch /var/log/dump_backup.log /var/log/public_dump_create.log /var/log/json_dump_create.log \
&& chown critiquebrainz:critiquebrainz /var/log/dump_backup.log /var/log/public_dump_create.log /var/log/json_dump_create.log
# Node dependencies
COPY ./package.json ./package-lock.json /code/
RUN npm install
COPY . /code/
# Build static files
RUN npm run build
# Compile translations
RUN pybabel compile -d critiquebrainz/frontend/translations
ARG GIT_COMMIT_SHA
ENV GIT_SHA ${GIT_COMMIT_SHA}
EXPOSE 13032