Minor changes in Docker container

This commit is contained in:
Heiko Joerg Schick
2023-08-30 14:16:25 +02:00
parent bee3df79f4
commit 381b4ba7ff
5 changed files with 74 additions and 10 deletions
+31 -9
View File
@@ -14,9 +14,20 @@ ENV PYTHONDONTWRITEBYTECODE=1
# the application crashes without emitting any logs due to buffering.
ENV PYTHONUNBUFFERED=1
# Install additional binary packages.
# Install required binary packages.
RUN apt-get update && apt-get install -y \
imagemagick \
&& rm -rf /var/lib/apt/lists/*
# Add PDF processing to the ImageMagic policy.
RUN sed -i 's/<policy domain="coder" rights="none" pattern="PDF" \/>/<policy domain="coder" rights="read|write" pattern="PDF" \/>/g' /etc/ImageMagick-6/policy.xml
# DEBUG. Only for debug purposes.
RUN apt-get update && apt-get install -y \
curl \
procps \
sudo \
vim \
&& rm -rf /var/lib/apt/lists/*
WORKDIR /app
@@ -24,14 +35,22 @@ WORKDIR /app
# Create a non-privileged user that the app will run under.
# See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
ARG UID=10001
RUN adduser \
--disabled-password \
--gecos "" \
--home "/nonexistent" \
--shell "/sbin/nologin" \
--no-create-home \
--uid "${UID}" \
appuser
#RUN adduser \
# --disabled-password \
# --gecos "" \
# --home "/nonexistent" \
# --shell "/sbin/nologin" \
# --no-create-home \
# --uid "${UID}" \
# appuser
# DEBUG. Only for debug purposes.
RUN useradd -r -u ${UID} -s /sbin/nologin -d /nonexistent appuser
RUN echo "appuser:12345678" | chpasswd
RUN echo 'appuser ALL=(ALL) NOPASSWD:ALL' | tee -a /etc/sudoers
# Upgrade pip
RUN python -m pip install --upgrade pip
# Download dependencies as a separate step to take advantage of Docker's caching.
# Leverage a cache mount to /root/.cache/pip to speed up subsequent builds.
@@ -47,6 +66,9 @@ USER appuser
# Copy the source code into the container.
COPY --chown=appuser . .
# Change file mode(s).
RUN chmod 0744 cron.sh
# Expose the port that the application listens on.
EXPOSE 5000