44 lines
1.0 KiB
Docker
44 lines
1.0 KiB
Docker
FROM python:3.11-slim
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Install system dependencies
|
|
# - Docker CLI + Compose plugin for docker executor
|
|
# - curl for health checks
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
docker-cli \
|
|
docker-compose-plugin \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy requirements first for layer caching
|
|
COPY requirements.txt .
|
|
|
|
# Install Python dependencies
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
# Copy application code
|
|
COPY app/ ./app/
|
|
|
|
# Create non-root user for security
|
|
RUN useradd -m -s /bin/bash agent && \
|
|
mkdir -p /home/agent/.letsbe-agent && \
|
|
chown -R agent:agent /home/agent/.letsbe-agent
|
|
|
|
# Environment
|
|
ENV PYTHONUNBUFFERED=1
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
|
|
# Default to non-root user
|
|
# Note: May need root for Docker socket access; use docker group instead
|
|
USER agent
|
|
|
|
# Entry point
|
|
CMD ["python", "-m", "app.main"]
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
CMD python -c "import sys; sys.exit(0)"
|