Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 35040f3c54 | |||
| 63abb64b4f | |||
| 730b57e8e8 |
14
Dockerfile
14
Dockerfile
@@ -1,5 +1,8 @@
|
|||||||
FROM python:3.12-slim
|
FROM python:3.12-slim
|
||||||
ARG VERSION=unkown
|
ARG VERSION=unknown
|
||||||
|
|
||||||
|
# Create a non-root user
|
||||||
|
RUN useradd appuser
|
||||||
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
COPY . .
|
COPY . .
|
||||||
@@ -11,15 +14,20 @@ ENV VERSION=${VERSION}
|
|||||||
|
|
||||||
# Install dependencies
|
# Install dependencies
|
||||||
RUN pip install --no-cache-dir --upgrade -r requirements.txt
|
RUN pip install --no-cache-dir --upgrade -r requirements.txt
|
||||||
RUN pip install 'uvicorn[standard]'
|
|
||||||
|
|
||||||
ENV ENV=DEV
|
ENV ENV=DEV
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER appuser
|
||||||
|
|
||||||
EXPOSE 8000
|
EXPOSE 8000
|
||||||
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|
||||||
|
|
||||||
# Install curl
|
# Install curl
|
||||||
RUN apt-get update && apt-get install -y curl && apt-get clean
|
USER root
|
||||||
|
RUN apt-get update && apt-get install --no-install-recommends -y curl && apt-get clean
|
||||||
|
|
||||||
|
# Switch back to non-root user for healthcheck
|
||||||
|
USER appuser
|
||||||
HEALTHCHECK --interval=30s --timeout=10s --retries=5 \
|
HEALTHCHECK --interval=30s --timeout=10s --retries=5 \
|
||||||
CMD curl --fail http://localhost:8000/openapi.json || exit 1
|
CMD curl --fail http://localhost:8000/openapi.json || exit 1
|
||||||
|
|||||||
Reference in New Issue
Block a user