Dockerfile

FROM python:3.8.5-slim-buster

LABEL maintainer="Lev Lybin <lev.lybin@gmail.com>"

ARG UID=1000
ARG GID=1000
ARG APP_ENV=development
ARG DJANGO_MIGRATE=off
ARG START_SERVER=off

EXPOSE 5000/tcp 9001/tcp

ENV APP_ENV=${APP_ENV} \
	DJANGO_MIGRATE=${DJANGO_MIGRATE} \
	START_SERVER=${START_SERVER} \
	# https://docs.python.org/3.8/using/cmdline.html
	PYTHONFAULTHANDLER=1 \
	PYTHONUNBUFFERED=1 \
	PYTHONHASHSEED=random \
	# https://github.com/pypa/pip/blob/master/src/pip/_internal/cli/cmdoptions.py
	PIP_NO_CACHE_DIR=on \
	PIP_DISABLE_PIP_VERSION_CHECK=on \
	PIP_DEFAULT_TIMEOUT=100 \
	# https://github.com/jwilder/dockerize
	DOCKERIZE_VERSION=v0.6.1 \
	# https://github.com/python-poetry/poetry
	POETRY_VERSION=1.0.10

# Create user and group for running app
RUN groupadd -r -g $GID app && useradd --no-log-init -r -u $UID -g app app

# System deps
RUN apt-get update \
	&& apt-get install --assume-yes --no-install-recommends --no-install-suggests \
		tini \
	&& rm -rf /var/lib/apt/lists/*

# This is a special case. We need to run this script as an entry point
COPY ./docker-entrypoint.sh /docker-entrypoint.sh
COPY ./docker-cmd.sh /docker-cmd.sh
RUN chmod +x "/docker-entrypoint.sh" \
	&& chmod +x "/docker-cmd.sh"

# Copy to cache them in docker layer
COPY ./supervisord.conf /supervisord.conf
COPY ./gunicorn.conf.py /gunicorn.conf.py

# Copy only requirements, to cache them in docker layer
WORKDIR /pysetup
COPY ./poetry.lock ./pyproject.toml /pysetup/

# Building system and app dependencies
RUN set -ex \
	&& savedAptMark="$(apt-mark showmanual)" \
	&& apt-get update \
	&& apt-get install --assume-yes --no-install-recommends --no-install-suggests \
		default-libmysqlclient-dev \
		gcc \
		wget \
	&& wget -nv "https://github.com/jwilder/dockerize/releases/download/${DOCKERIZE_VERSION}/dockerize-linux-amd64-${DOCKERIZE_VERSION}.tar.gz" \
	&& tar -C /usr/local/bin -xzvf "dockerize-linux-amd64-${DOCKERIZE_VERSION}.tar.gz" \
	&& rm "dockerize-linux-amd64-${DOCKERIZE_VERSION}.tar.gz" \
	&& pip install "poetry==$POETRY_VERSION" \
	&& poetry config virtualenvs.create false \
	&& poetry install --no-interaction --no-ansi \
	&& apt-mark auto '.*' > /dev/null \
	&& apt-mark manual $savedAptMark \
	&& find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' \
		| awk '/=>/ { print $(NF-1) }' \
		| sort -u \
		| xargs -r dpkg-query --search \
		| cut -d: -f1 \
		| sort -u \
		| xargs -r apt-mark manual \
	&& apt-get purge --assume-yes --auto-remove \
		--option APT::AutoRemove::RecommendsImportant=false \
		--option APT::AutoRemove::SuggestsImportant=false \
	&& rm -rf /var/lib/apt/lists/*

USER app
COPY --chown=app:app . /app
WORKDIR /app

RUN python manage.py collectstatic --no-input

VOLUME ["/app/static", "/app/db"]

ENTRYPOINT ["/usr/bin/tini", "--", "/docker-entrypoint.sh"]
CMD ["/docker-cmd.sh"]