Dockerfile

FROM python:3.11-slim as poetry

ENV PATH "/root/.local/bin:${PATH}"
ENV PYTHONUNBUFFERED 1

WORKDIR /root
# see DOK-DL4006
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
RUN apt-get update && \
    apt-get install curl -y --no-install-recommends && \
    curl -sSL https://install.python-poetry.org | python -
COPY poetry.lock pyproject.toml ./
RUN poetry export --no-interaction -o requirements.txt --without-hashes --only main,docker


FROM python:3.11-slim as base

ENV PYTHONPATH "/app"

WORKDIR /app

RUN groupadd -g 5000 container && useradd -d /app -m -g container -u 5000 container

RUN apt-get update && \
    apt-get install git -y --no-install-recommends && \
    apt-get clean

COPY --from=poetry /root/requirements.txt ./
RUN pip install --no-cache-dir -U pip && \
    pip --no-cache-dir install -r requirements.txt
COPY src/ src/


FROM base AS git

# Save build version
COPY .git .git
RUN git rev-parse HEAD > /commit.txt


FROM base AS final

COPY --from=git /commit.txt commit.txt
RUN chown -R 5000:5000 /app
USER container

ENV PROD 1
VOLUME /app/data

CMD ["dumb-init", "uvicorn", "src.app:app", "--host", "0.0.0.0", "--port", "8000"]