forked from bybatkhuu/rest-fastapi-template
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathDockerfile
More file actions
169 lines (143 loc) · 6.75 KB
/
Copy pathDockerfile
File metadata and controls
169 lines (143 loc) · 6.75 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
# syntax=docker/dockerfile:1
ARG BASE_IMAGE=ubuntu:22.04
ARG DEBIAN_FRONTEND=noninteractive
ARG FT_API_SLUG="rest.fastapi-template"
## Here is the builder image:
FROM ${BASE_IMAGE} AS builder
ARG DEBIAN_FRONTEND
ARG FT_API_SLUG
# ARG USE_GPU=false
ARG PYTHON_VERSION=3.9
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
WORKDIR "/usr/src/${FT_API_SLUG}"
RUN --mount=type=cache,target=/opt/conda/pkgs,sharing=private \
--mount=type=cache,target=/root/.cache,sharing=locked \
_BUILD_TARGET_ARCH=$(uname -m) && \
echo "BUILDING TARGET ARCHITECTURE: ${_BUILD_TARGET_ARCH}" && \
rm -rfv /var/lib/apt/lists/* /var/cache/apt/archives/* /tmp/* && \
apt-get clean -y && \
apt-get update --fix-missing -o Acquire::CompressionTypes::Order::=gz && \
apt-get install -y --no-install-recommends \
ca-certificates \
build-essential \
wget && \
if [ "${_BUILD_TARGET_ARCH}" == "x86_64" ]; then \
export _MINICONDA_FILENAME=Miniconda3-py39_24.9.2-0-Linux-x86_64.sh; \
export _MINICONDA_URL=https://repo.anaconda.com/miniconda/${_MINICONDA_FILENAME}; \
elif [ "${_BUILD_TARGET_ARCH}" == "aarch64" ]; then \
export _MINICONDA_FILENAME=Miniconda3-py39_24.9.2-0-Linux-aarch64.sh; \
export _MINICONDA_URL=https://repo.anaconda.com/miniconda/${_MINICONDA_FILENAME}; \
# export _MINICONDA_FILENAME=Miniforge3-24.9.2-0-Linux-aarch64.sh; \
# export _MINICONDA_URL=https://github.com/conda-forge/miniforge/releases/download/24.9.2-0/${_MINICONDA_FILENAME}; \
else \
echo "Unsupported platform: ${_BUILD_TARGET_ARCH}" && \
exit 1; \
fi && \
if [ ! -f "/root/.cache/${_MINICONDA_FILENAME}" ]; then \
wget -nv --show-progress --progress=bar:force:noscroll "${_MINICONDA_URL}" -O "/root/.cache/${_MINICONDA_FILENAME}"; \
fi && \
/bin/bash "/root/.cache/${_MINICONDA_FILENAME}" -b -u -p /opt/conda && \
/opt/conda/condabin/conda update -y conda && \
/opt/conda/condabin/conda install -y python=${PYTHON_VERSION} pip && \
/opt/conda/bin/pip install --timeout 60 -U pip
# COPY ./requirements* ./
RUN --mount=type=cache,target=/root/.cache,sharing=locked \
--mount=type=bind,source=requirements.txt,target=requirements.txt \
# _BUILD_TARGET_ARCH=$(uname -m) && \
# if [ "${_BUILD_TARGET_ARCH}" == "x86_64" ] && [ "${USE_GPU}" == "false" ]; then \
# export _REQUIRE_FILE_PATH=./requirements/requirements.amd64.txt; \
# elif [ "${_BUILD_TARGET_ARCH}" == "x86_64" ] && [ "${USE_GPU}" == "true" ]; then \
# export _REQUIRE_FILE_PATH=./requirements/requirements.gpu.txt; \
# elif [ "${_BUILD_TARGET_ARCH}" == "aarch64" ]; then \
# export _REQUIRE_FILE_PATH=./requirements/requirements.arm64.txt; \
# fi && \
# /opt/conda/bin/pip install --timeout 60 -r "${_REQUIRE_FILE_PATH}" && \
/opt/conda/bin/pip install --timeout 60 -r ./requirements.txt
## Here is the base image:
FROM ${BASE_IMAGE} AS base
ARG DEBIAN_FRONTEND
ARG FT_API_SLUG
ARG FT_HOME_DIR="/app"
ARG FT_API_DIR="${FT_HOME_DIR}/${FT_API_SLUG}"
ARG FT_API_DATA_DIR="/var/lib/${FT_API_SLUG}"
ARG FT_API_LOGS_DIR="/var/log/${FT_API_SLUG}"
ARG FT_API_TMP_DIR="/tmp/${FT_API_SLUG}"
# ARG FT_API_MODELS_DIR="${FT_API_DATA_DIR}/models"
ARG FT_API_PORT=8000
## IMPORTANT!: Get hashed password from build-arg!
## echo "FT_USER_PASSWORD123" | openssl passwd -5 -stdin
ARG HASH_PASSWORD="\$5\$UN1S7dZEa/qDoijJ\$hJ5o.Wpp5aP2kp.46Y7lWgcsRE8/oRLVswU6Swi13fB"
ARG UID=1000
ARG GID=11000
ARG USER=ft-user
ARG GROUP=ft-group
ENV FT_HOME_DIR="${FT_HOME_DIR}" \
FT_API_DIR="${FT_API_DIR}" \
FT_API_DATA_DIR="${FT_API_DATA_DIR}" \
FT_API_LOGS_DIR="${FT_API_LOGS_DIR}" \
FT_API_TMP_DIR="${FT_API_TMP_DIR}" \
FT_API_PORT=${FT_API_PORT} \
UID=${UID} \
GID=${GID} \
USER=${USER} \
GROUP=${GROUP} \
PYTHONIOENCODING=utf-8 \
PYTHONUNBUFFERED=1 \
PATH="/opt/conda/bin:${PATH}"
# ENV FT_API_MODELS_DIR="${FT_API_MODELS_DIR}"
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
RUN rm -rfv /var/lib/apt/lists/* /var/cache/apt/archives/* /tmp/* /root/.cache/* && \
apt-get clean -y && \
apt-get update --fix-missing -o Acquire::CompressionTypes::Order::=gz && \
apt-get install -y --no-install-recommends \
sudo \
locales \
tzdata \
procps \
iputils-ping \
net-tools \
curl \
nano && \
apt-get clean -y && \
sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && \
sed -i -e 's/# en_AU.UTF-8 UTF-8/en_AU.UTF-8 UTF-8/' /etc/locale.gen && \
sed -i -e 's/# ko_KR.UTF-8 UTF-8/ko_KR.UTF-8 UTF-8/' /etc/locale.gen && \
dpkg-reconfigure --frontend=noninteractive locales && \
update-locale LANG=en_US.UTF-8 && \
echo "LANGUAGE=en_US.UTF-8" >> /etc/default/locale && \
echo "LC_ALL=en_US.UTF-8" >> /etc/default/locale && \
addgroup --gid ${GID} ${GROUP} && \
useradd -lmN -d "/home/${USER}" -s /bin/bash -g ${GROUP} -G sudo -u ${UID} ${USER} && \
echo "${USER} ALL=(ALL) NOPASSWD: ALL" > "/etc/sudoers.d/${USER}" && \
chmod 0440 "/etc/sudoers.d/${USER}" && \
echo -e "${USER}:${HASH_PASSWORD}" | chpasswd -e && \
echo -e "\nalias ls='ls -aF --group-directories-first --color=auto'" >> /root/.bashrc && \
echo -e "alias ll='ls -alhF --group-directories-first --color=auto'\n" >> /root/.bashrc && \
echo -e "\numask 0002" >> "/home/${USER}/.bashrc" && \
echo "alias ls='ls -aF --group-directories-first --color=auto'" >> "/home/${USER}/.bashrc" && \
echo -e "alias ll='ls -alhF --group-directories-first --color=auto'\n" >> "/home/${USER}/.bashrc" && \
echo ". /opt/conda/etc/profile.d/conda.sh" >> "/home/${USER}/.bashrc" && \
echo "conda activate base" >> "/home/${USER}/.bashrc" && \
rm -rfv /var/lib/apt/lists/* /var/cache/apt/archives/* /tmp/* /root/.cache/* "/home/${USER}/.cache/*" && \
mkdir -pv "${FT_API_DIR}" "${FT_API_DATA_DIR}" "${FT_API_LOGS_DIR}" "${FT_API_TMP_DIR}" && \
chown -Rc "${USER}:${GROUP}" "${FT_HOME_DIR}" "${FT_API_DATA_DIR}" "${FT_API_LOGS_DIR}" "${FT_API_TMP_DIR}" && \
find "${FT_API_DIR}" "${FT_API_DATA_DIR}" -type d -exec chmod -c 770 {} + && \
find "${FT_API_DIR}" "${FT_API_DATA_DIR}" -type d -exec chmod -c ug+s {} + && \
find "${FT_API_LOGS_DIR}" "${FT_API_TMP_DIR}" -type d -exec chmod -c 775 {} + && \
find "${FT_API_LOGS_DIR}" "${FT_API_TMP_DIR}" -type d -exec chmod -c +s {} +
ENV LANG=en_US.UTF-8 \
LANGUAGE=en_US.UTF-8 \
LC_ALL=en_US.UTF-8
COPY --from=builder --chown=${UID}:${GID} /opt/conda /opt/conda
## Here is the final image:
FROM base AS app
WORKDIR "${FT_API_DIR}"
COPY --chown=${UID}:${GID} ./src ${FT_API_DIR}
COPY --chown=${UID}:${GID} --chmod=770 ./scripts/docker/*.sh /usr/local/bin/
# VOLUME ["${FT_API_DATA_DIR}"]
# EXPOSE ${FT_API_PORT}
USER ${UID}:${GID}
# HEALTHCHECK --start-period=30s --start-interval=1s --interval=5m --timeout=5s --retries=3 \
# CMD curl -f http://localhost:${FT_API_PORT}/api/v${FT_API_VERSION:-1}/ping || exit 1
ENTRYPOINT ["docker-entrypoint.sh"]
# CMD ["-b", "uvicorn main:app --host=0.0.0.0 --port=${FT_API_PORT:-8000} --no-access-log --no-server-header --proxy-headers --forwarded-allow-ips='*'"]