letsbe-sysadmin/Dockerfile

49 lines
1.4 KiB
Docker

FROM python:3.11-slim
# Set working directory
WORKDIR /app
# Install system dependencies
# - Docker CLI for docker executor
# - curl for health checks
RUN apt-get update && \
apt-get install -y --no-install-recommends \
docker-cli \
curl \
&& rm -rf /var/lib/apt/lists/*
# Install Docker Compose plugin (not in Debian repos, download from Docker)
RUN mkdir -p /usr/local/lib/docker/cli-plugins && \
curl -SL "https://github.com/docker/compose/releases/download/v2.32.1/docker-compose-linux-x86_64" \
-o /usr/local/lib/docker/cli-plugins/docker-compose && \
chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
# Copy requirements first for layer caching
COPY requirements.txt .
# Install Python dependencies
RUN pip install --no-cache-dir -r requirements.txt
# Copy application code
COPY app/ ./app/
# Create non-root user for security
RUN useradd -m -s /bin/bash agent && \
mkdir -p /home/agent/.letsbe-agent && \
chown -R agent:agent /home/agent/.letsbe-agent
# Environment
ENV PYTHONUNBUFFERED=1
ENV PYTHONDONTWRITEBYTECODE=1
# Default to non-root user
# Note: May need root for Docker socket access; use docker group instead
USER agent
# Entry point
CMD ["python", "-m", "app.main"]
# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
CMD python -c "import sys; sys.exit(0)"