Minor changes in Docker container
This commit is contained in:
+31
-9
@@ -14,9 +14,20 @@ ENV PYTHONDONTWRITEBYTECODE=1
|
||||
# the application crashes without emitting any logs due to buffering.
|
||||
ENV PYTHONUNBUFFERED=1
|
||||
|
||||
# Install additional binary packages.
|
||||
# Install required binary packages.
|
||||
RUN apt-get update && apt-get install -y \
|
||||
imagemagick \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Add PDF processing to the ImageMagic policy.
|
||||
RUN sed -i 's/<policy domain="coder" rights="none" pattern="PDF" \/>/<policy domain="coder" rights="read|write" pattern="PDF" \/>/g' /etc/ImageMagick-6/policy.xml
|
||||
|
||||
# DEBUG. Only for debug purposes.
|
||||
RUN apt-get update && apt-get install -y \
|
||||
curl \
|
||||
procps \
|
||||
sudo \
|
||||
vim \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
WORKDIR /app
|
||||
@@ -24,14 +35,22 @@ WORKDIR /app
|
||||
# Create a non-privileged user that the app will run under.
|
||||
# See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
|
||||
ARG UID=10001
|
||||
RUN adduser \
|
||||
--disabled-password \
|
||||
--gecos "" \
|
||||
--home "/nonexistent" \
|
||||
--shell "/sbin/nologin" \
|
||||
--no-create-home \
|
||||
--uid "${UID}" \
|
||||
appuser
|
||||
#RUN adduser \
|
||||
# --disabled-password \
|
||||
# --gecos "" \
|
||||
# --home "/nonexistent" \
|
||||
# --shell "/sbin/nologin" \
|
||||
# --no-create-home \
|
||||
# --uid "${UID}" \
|
||||
# appuser
|
||||
|
||||
# DEBUG. Only for debug purposes.
|
||||
RUN useradd -r -u ${UID} -s /sbin/nologin -d /nonexistent appuser
|
||||
RUN echo "appuser:12345678" | chpasswd
|
||||
RUN echo 'appuser ALL=(ALL) NOPASSWD:ALL' | tee -a /etc/sudoers
|
||||
|
||||
# Upgrade pip
|
||||
RUN python -m pip install --upgrade pip
|
||||
|
||||
# Download dependencies as a separate step to take advantage of Docker's caching.
|
||||
# Leverage a cache mount to /root/.cache/pip to speed up subsequent builds.
|
||||
@@ -47,6 +66,9 @@ USER appuser
|
||||
# Copy the source code into the container.
|
||||
COPY --chown=appuser . .
|
||||
|
||||
# Change file mode(s).
|
||||
RUN chmod 0744 cron.sh
|
||||
|
||||
# Expose the port that the application listens on.
|
||||
EXPOSE 5000
|
||||
|
||||
|
||||
Reference in New Issue
Block a user