Dockerfile

# syntax=docker/dockerfile:1.7

ARG PYTHON_VERSION=3.11
ARG LOGPREP_VERSION=""

FROM registry-1.docker.io/library/python:${PYTHON_VERSION} AS build

ARG LOGPREP_VERSION

RUN apt-get update && \
    rm -rf /var/lib/apt/lists/*

RUN python -m venv --upgrade-deps /opt/venv

# Install the Rust toolchain
RUN curl https://sh.rustup.rs -sSf | bash -s -- -y
ENV PATH="/opt/venv/bin:/root/.cargo/bin:${PATH}"

# Install uv 0.10.9
COPY --from=ghcr.io/astral-sh/uv:0.10.9 /uv /uvx /bin/

WORKDIR /logprep

ENV UV_COMPILE_BYTECODE=1

# Omit development dependencies
ENV UV_NO_DEV=1

# Copy from the cache instead of linking since it's a mounted volume
ENV UV_LINK_MODE=copy

ENV UV_PROJECT_ENVIRONMENT=/opt/venv

ENV SETUPTOOLS_SCM_PRETEND_VERSION_FOR_LOGPREP=${LOGPREP_VERSION}

# Install deps using only the lockfile + pyproject.toml first (best layer caching)
# adding relabel=shared after "readonly," can be necessary for builds on MacOS
RUN --mount=type=cache,target=/root/.cache/uv \
    --mount=type=bind,source=uv.lock,target=/logprep/uv.lock,readonly \
    --mount=type=bind,source=pyproject.toml,target=/logprep/pyproject.toml,readonly \
    uv sync --no-install-project --no-editable --frozen

# Then copy the rest of the project
COPY . /logprep/

# Use pyproject.toml to install logprep, non-editable \
RUN --mount=type=cache,target=/root/.cache/uv \
    uv sync --no-editable --frozen && \
    logprep --version

# Uninstall dependencies from pyproject.toml:build-system.requires
RUN --mount=type=cache,target=/root/.cache/uv \
    uv pip uninstall setuptools setuptools-scm setuptools-rust wheel

FROM registry-1.docker.io/library/python:${PYTHON_VERSION}-slim AS prod

# remove setuptools as installed by the python image
# setuptools is not needed at runtime and is vulnerable by CVE-2024-6345
RUN pip3 uninstall \
    --disable-pip-version-check \
    --no-cache-dir \
    --yes \
    'setuptools' \
    'wheel'

RUN apt-get update && apt-get -y upgrade && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

COPY --from=build /opt/venv /opt/venv
RUN useradd -s /bin/sh -m -c "logprep user" logprep
USER logprep

# Make sure we use the virtualenv:
ENV PATH="/opt/venv/bin:${PATH}"
WORKDIR /home/logprep

ENTRYPOINT ["logprep"]