mirror of
https://github.com/SpecterOps/Nemesis
synced 2026-06-08 12:36:42 +00:00
harmj0y
67 lines
1.7 KiB
Docker
67 lines
1.7 KiB
Docker
ARG PYTHON_BASE_DEV_IMAGE=nemesis-python-base-dev
|
|
ARG PYTHON_BASE_PROD_IMAGE=nemesis-python-base-prod
|
|
FROM ${PYTHON_BASE_DEV_IMAGE} AS base
|
|
|
|
# Install build dependencies needed for plyvel and other native packages
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
libleveldb-dev \
|
|
libleveldb1d \
|
|
pkg-config && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# If dependencies change, re-copy all the dependencies
|
|
# In the future we can be more efficient with this an only copy the lib folders
|
|
# that this project uses
|
|
COPY ./projects/cli/poetry.lock ./projects/cli/pyproject.toml /src/projects/cli/
|
|
|
|
COPY ./libs /src/libs
|
|
COPY ./projects/cli /src/projects/cli/
|
|
|
|
WORKDIR /src/projects/cli
|
|
|
|
########################
|
|
# Development
|
|
########################
|
|
FROM base AS dev
|
|
COPY --from=base /src /src
|
|
|
|
WORKDIR /src/projects/cli
|
|
RUN poetry install
|
|
|
|
# Immediate output (no buffering)
|
|
ENV PYTHONUNBUFFERED=1
|
|
# No .pyc/pycache files
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
|
|
ENV LOG_LEVEL=DEBUG
|
|
|
|
ENTRYPOINT ["poetry", "run", "python", "-m", "cli"]
|
|
|
|
########################
|
|
# Production
|
|
########################
|
|
FROM base AS bundle
|
|
COPY --from=base /src /src
|
|
|
|
WORKDIR /src/projects/cli
|
|
RUN poetry bundle venv --python=/usr/bin/python3 --only=main /venv
|
|
|
|
FROM ${PYTHON_BASE_PROD_IMAGE} AS prod
|
|
|
|
# Install ONLY runtime dependencies for plyvel (not build dependencies)
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
libleveldb1d && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=bundle /venv /venv
|
|
|
|
ENV PYTHONUNBUFFERED=1
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
ENV LOG_LEVEL=INFO
|
|
|
|
ENTRYPOINT ["/venv/bin/python", "-m", "cli"] |