opensanctions/Dockerfile at main · DigintLab/opensanctions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
FROM ubuntu:24.04 AS build

ARG BUILD_DATE=static

ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get -qq -y update \
    && apt-get -qq -y upgrade \
    && apt-get -qq -y install --no-install-recommends \
    apt-transport-https ca-certificates build-essential gnupg \
    tzdata curl python3-pip python3-dev python3-venv \
    libicu-dev pkg-config libxml2-dev libxslt1-dev libleveldb-dev libleveldb1d \
    && apt-get -qq -y autoremove \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

RUN python3 -m venv /venv
ENV PATH="/venv/bin:$PATH"
RUN pip3 install --no-cache-dir -U pip

COPY zavod /opensanctions/zavod
RUN pip install --no-cache-dir -e /opensanctions/zavod
WORKDIR /opensanctions

# ----------------------------------------------------------------------------------------
FROM ubuntu:24.04 AS runtime

LABEL org.opencontainers.image.title="OpenSanctions ETL"
LABEL org.opencontainers.image.licenses=MIT
LABEL org.opencontainers.image.source=https://github.com/opensanctions/opensanctions
ARG BUILD_DATE=static

ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get -qq -y update \
    && apt-get -qq -y upgrade \
    && apt-get -qq -y install --no-install-recommends \
    locales apt-transport-https ca-certificates gnupg \
    tzdata curl python3-pip python3-venv poppler-utils poppler-data \
    libicu74 libleveldb1d \
    && apt-get -qq -y autoremove \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

ENV LANG="en_US.UTF-8" \
    TZ="UTC" \
    ZAVOD_DATA_PATH="/opensanctions/data" \
    OPENSSL_CONF="/opensanctions/contrib/openssl.cnf"

RUN localedef -i en_US -c -f UTF-8 -A /usr/share/locale/locale.alias en_US.UTF-8 \
    && ln -fs /usr/share/zoneinfo/Etc/UTC /etc/localtime \
    && dpkg-reconfigure -f noninteractive tzdata \
    && groupadd -g 10023 -r app \
    && useradd -m -u 10023 -s /bin/false -g app app

COPY --from=build /venv /venv
ENV PATH="/venv/bin:$PATH"
COPY . /opensanctions
RUN pip install --no-cache-dir -e /opensanctions/zavod
WORKDIR /opensanctions

CMD ["zavod"]