Ludy87
aeb027e9ee
Pin base images to immutable sha256 digests for reproducible and more secure builds. Updated ARG BASE_VERSION to include digest in docker/backend/Dockerfile, docker/embedded/Dockerfile, and docker/embedded/Dockerfile.fat; replaced eclipse-temurin base in embedded/Dockerfile.fat with a sha256-pinned reference; and pinned the ghcr.io/astral-sh/uv base image in engine/Dockerfile.dev.
15 lines
442 B
Docker
15 lines
442 B
Docker
# syntax=docker/dockerfile:1.5
|
|
FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca
|
|
WORKDIR /app
|
|
|
|
COPY pyproject.toml uv.lock ./
|
|
RUN --mount=type=cache,target=/root/.cache/uv \
|
|
uv sync --frozen
|
|
|
|
ENV PATH="/app/.venv/bin:$PATH"
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
EXPOSE 5001
|
|
|
|
CMD ["uv", "run", "uvicorn", "stirling.api.app:app", "--host", "0.0.0.0", "--port", "5001", "--reload"]
|