jonaspammerwork/python repository overview

ARG BASE_IMAGE="python:3.12-bookworm"

FROM ghcr.io/astral-sh/ruff:latest AS ruff
FROM ghcr.io/astral-sh/uv:latest AS uv
FROM selenium/standalone-chrome AS chrome
FROM docker:27-cli AS docker-cli
FROM ${BASE_IMAGE:-ubuntu:latest}

## Common Features
ENV DEBIAN_FRONTEND=noninteractive
ENV LANG=C.UTF-8
ENV LC_ALL=C.UTF-8
# Enable e.g. 'source' and [[
SHELL ["/bin/bash", "-c"]
# Set up environment variables for Docker-in-Docker communication as per GitLab Runner
ENV DOCKER_HOST=tcp://docker:2376 \
    DOCKER_TLS_CERTDIR=/certs \
    DOCKER_TLS_VERIFY=1 \
    DOCKER_CERT_PATH=/certs/client
# Add docker binary and optional supporting files from the docker-cli image
COPY --from=docker-cli /usr/local/bin/docker /usr/local/bin/docker
COPY --from=docker-cli /usr/local/libexec/docker /usr/local/libexec/docker
# Add Chrome support
COPY --from=chrome /opt/selenium /opt/selenium
COPY --from=chrome /usr/bin/google-chrome /usr/bin/google-chrome
COPY --from=chrome /usr/bin/google-chrome /usr/bin/chromedriver
# choose fastest mirror (https://www.baeldung.com/linux/apt-terminal-choose-fastest-mirror)
RUN source /etc/os-release && \
    if [[ "$ID" == "ubuntu" ]]; then \
        sed -iv "s|deb [a-z]*://[^ ]* |deb mirror://mirrors.ubuntu.com/mirrors.txt |g" /etc/apt/sources.list; \
    fi;
# (Deliberately not removing apt cache)
RUN apt-get -qy update && apt-get -qy upgrade && apt-get -qy autoremove
RUN apt-get -qy install tzdata
# Install common Unix utilities
RUN apt-get -qy install curl tar zip unzip wget sed recode dos2unix rpl grep coreutils rsync git jq build-essential util-linux net-tools tree dnsutils iputils-ping
# Install useful CI tools
RUN apt-get -qy install openssl bc netcat-openbsd wait-for-it ripgrep gettext gcc pkg-config binutils
RUN apt-get -qqy install bat nano iproute2 || true
# Install "SMTP Swiss Army Knife"
RUN (curl -L https://jetmore.org/john/code/swaks/files/swaks-20240103.0/swaks -o /usr/bin/swaks && chmod 755 /usr/bin/swaks) || apt-get install -qy swaks
# Install Taskfile
RUN sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d -b /usr/bin
# Install Ruby, gem, and Bundler
RUN apt-get -qy install ruby && gem install bundler
# https://github.com/ruby/bigdecimal/issues/297 - fix bigdecimal install error
RUN apt-get -qy install libjemalloc-dev libgmp-dev libz-dev clang

# Install Node Version Manager
ENV NVM_DIR=/root/.nvm
RUN curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/master/install.sh | bash


# Python Best Practices
ENV PYTHONUNBUFFERED=1
ENV PYTHONDONTWRITEBYTECODE=1

# install python3-wheel, python3-dev and (for security purposes) upgrade python packages of system python
USER root
RUN export DEBIAN_FRONTEND=noninteractive && apt-get -qy update \
    && apt-get -qqy install --no-install-recommends python3-wheel python3-dev \
    && python3 -m pip install --no-cache-dir --upgrade pip \
    && python3 -m pip install --no-cache-dir --upgrade setuptools \
    && python3 -m pip install --no-cache-dir --upgrade wheel \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

# or: RUN curl -LsSf https://astral.sh/uv/install.sh | sh
COPY --from=uv /uv /uvx /usr/bin/
# or: RUN uv tool install ruff@latest
# or: RUN curl -LsSf https://astral.sh/ruff/install.sh | sh
COPY --from=ruff /ruff /usr/bin/

# Setup UV - https://docs.astral.sh/uv/guides/integration/gitlab/
ENV UV_CACHE_DIR=".uv-cache"
# GitLab CI creates a separate mountpoint for the build directory,
# so we need to copy instead of using hard links.
ENV UV_LINK_MODE="copy"