backend-api/Dockerfile
florian 322cd3baa2 Hardened Dockerfile
Switched to multi stage process to harden the Dockerfile
2025-11-03 20:54:53 +01:00

18 lines
499 B
Docker

# Builder stage
FROM python:3.12-slim AS builder
RUN apt-get update \
&& apt-get install -y --no-install-recommends git build-essential \
&& rm -rf /var/lib/apt/lists/*
WORKDIR /install
COPY requirements.txt .
RUN pip install --prefix=/install --no-cache-dir -r requirements.txt
WORKDIR /app
COPY src/ /app/
# Runtime image
FROM nvcr.io/nvidia/distroless/python:3.12-v3.5.1
COPY --from=builder /install /usr/local
COPY --from=builder /app /app
WORKDIR /app
ENTRYPOINT ["python", "main.py"]