Lebaud Antoine
297007162a
To facilitate deployment on Kubernetes, we've introduced a Docker image for the frontend. The Next project is built, and its static output is served using an Nginx reverse proxy. Since DevOps lacks a certified cold storage solution (e.g., S3) for serving static files, we've opted to containerize the frontend as a quick workaround for deploying staging environments.
185 lines
4.4 KiB
Docker
185 lines
4.4 KiB
Docker
# Django People
|
|
|
|
# ---- base image to inherit from ----
|
|
FROM python:3.10-slim-bullseye as base
|
|
|
|
# Upgrade pip to its latest release to speed up dependencies installation
|
|
RUN python -m pip install --upgrade pip
|
|
|
|
# Upgrade system packages to install security updates
|
|
RUN apt-get update && \
|
|
apt-get -y upgrade && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
|
|
### ---- Front-end builder image ----
|
|
FROM node:20 as front-builder
|
|
|
|
# Copy frontend app sources
|
|
COPY ./src/frontend /builder
|
|
|
|
WORKDIR /builder/apps/desk
|
|
|
|
RUN yarn install --frozen-lockfile && \
|
|
yarn build
|
|
|
|
|
|
# ---- Front-end image ----
|
|
FROM nginxinc/nginx-unprivileged:1.25 as frontend
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
COPY --from=front-builder \
|
|
/builder/apps/desk/out \
|
|
/usr/share/nginx/html
|
|
|
|
COPY ./docker/files/etc/nginx/conf.d /etc/nginx/conf.d:ro
|
|
|
|
# Copy entrypoint
|
|
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
|
|
|
|
ENTRYPOINT [ "/usr/local/bin/entrypoint" ]
|
|
|
|
CMD ["nginx", "-g", "daemon off;"]
|
|
|
|
|
|
# ---- Back-end builder image ----
|
|
FROM base as back-builder
|
|
|
|
WORKDIR /builder
|
|
|
|
# Copy required python dependencies
|
|
COPY ./src/backend /builder
|
|
|
|
RUN mkdir /install && \
|
|
pip install --prefix=/install .
|
|
|
|
|
|
# ---- mails ----
|
|
FROM node:20 as mail-builder
|
|
|
|
COPY ./src/mail /mail/app
|
|
|
|
WORKDIR /mail/app
|
|
|
|
RUN yarn install --frozen-lockfile && \
|
|
yarn build
|
|
|
|
|
|
# ---- static link collector ----
|
|
FROM base as link-collector
|
|
ARG PEOPLE_STATIC_ROOT=/data/static
|
|
|
|
# Install libpangocairo & rdfind
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
libpangocairo-1.0-0 \
|
|
rdfind && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy people application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# collectstatic
|
|
RUN DJANGO_CONFIGURATION=Build DJANGO_JWT_PRIVATE_SIGNING_KEY=Dummy \
|
|
python manage.py collectstatic --noinput
|
|
|
|
# Replace duplicated file by a symlink to decrease the overall size of the
|
|
# final image
|
|
RUN rdfind -makesymlinks true -followsymlinks true -makeresultsfile false ${PEOPLE_STATIC_ROOT}
|
|
|
|
# ---- Core application image ----
|
|
FROM base as core
|
|
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# Install required system libs
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
gettext \
|
|
libcairo2 \
|
|
libffi-dev \
|
|
libgdk-pixbuf2.0-0 \
|
|
libpango-1.0-0 \
|
|
libpangocairo-1.0-0 \
|
|
shared-mime-info && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy entrypoint
|
|
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
|
|
|
|
# Give the "root" group the same permissions as the "root" user on /etc/passwd
|
|
# to allow a user belonging to the root group to add new users; typically the
|
|
# docker user (see entrypoint).
|
|
RUN chmod g=u /etc/passwd
|
|
|
|
# Copy installed python dependencies
|
|
COPY --from=back-builder /install /usr/local
|
|
|
|
# Copy people application (see .dockerignore)
|
|
COPY ./src/backend /app/
|
|
|
|
WORKDIR /app
|
|
|
|
# We wrap commands run in this container by the following entrypoint that
|
|
# creates a user on-the-fly with the container user ID (see USER) and root group
|
|
# ID.
|
|
ENTRYPOINT [ "/usr/local/bin/entrypoint" ]
|
|
|
|
# ---- Development image ----
|
|
FROM core as development
|
|
|
|
# Switch back to the root user to install development dependencies
|
|
USER root:root
|
|
|
|
# Install psql
|
|
RUN apt-get update && \
|
|
apt-get install -y postgresql-client && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Uninstall people and re-install it in editable mode along with development
|
|
# dependencies
|
|
RUN pip uninstall -y people
|
|
RUN pip install -e .[dev]
|
|
|
|
# Restore the un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Target database host (e.g. database engine following docker compose services
|
|
# name) & port
|
|
ENV DB_HOST=postgresql \
|
|
DB_PORT=5432
|
|
|
|
# Run django development server
|
|
CMD python manage.py runserver 0.0.0.0:8000
|
|
|
|
# ---- Production image ----
|
|
FROM core as production
|
|
|
|
ARG PEOPLE_STATIC_ROOT=/data/static
|
|
|
|
# Gunicorn
|
|
RUN mkdir -p /usr/local/etc/gunicorn
|
|
COPY docker/files/usr/local/etc/gunicorn/people.py /usr/local/etc/gunicorn/people.py
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Copy statics
|
|
COPY --from=link-collector ${PEOPLE_STATIC_ROOT} ${PEOPLE_STATIC_ROOT}
|
|
|
|
# Copy people mails
|
|
COPY --from=mail-builder /mail/backend/core/templates/mail /app/core/templates/mail
|
|
|
|
# The default command runs gunicorn WSGI server in people's main module
|
|
CMD gunicorn -c /usr/local/etc/gunicorn/people.py people.wsgi:application
|