44 lines
938 B
Docker
44 lines
938 B
Docker
# syntax=docker/dockerfile:1
|
|
|
|
ARG PYTHON_VERSION=3.11
|
|
# Fast Python builds using uv on Debian bookworm-slim
|
|
FROM ghcr.io/astral-sh/uv:python${PYTHON_VERSION}-bookworm-slim AS base
|
|
|
|
ARG UID=10001
|
|
|
|
# Ensures that logs are captured in realtime
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# Create unprivileged user
|
|
RUN adduser \
|
|
--disabled-password \
|
|
--gecos "" \
|
|
--home "/app" \
|
|
--shell "/sbin/nologin" \
|
|
--uid "${UID}" \
|
|
appuser
|
|
|
|
# System build deps for common Python wheels
|
|
RUN apt-get update && apt-get install -y \
|
|
gcc \
|
|
python3-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
# Dependency install first for better caching
|
|
COPY pyproject.toml uv.lock ./
|
|
RUN mkdir -p src
|
|
RUN uv sync --locked
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
RUN chown -R appuser:appuser /app
|
|
USER appuser
|
|
|
|
# Pre-download models/assets at build time
|
|
RUN uv run src/agent.py download-files
|
|
|
|
# Start the agent
|
|
CMD ["uv", "run", "src/agent.py", "start"]
|