Florian 4d7d614f7b
All checks were successful
/ build (push) Successful in 1m8s
Hardened Dockerfile
Switched to multi stage process to harden the Dockerfile
2025-11-04 10:13:29 +01:00

19 lines
500 B
Docker

# Builder stage
FROM python:3.12-slim AS builder
RUN apt-get update \
&& apt-get install -y --no-install-recommends git build-essential \
&& rm -rf /var/lib/apt/lists/*
WORKDIR /install
COPY requirements.txt .
RUN pip install --prefix=/install --no-cache-dir -r requirements.txt
WORKDIR /app
COPY src/ /app/
# Runtime image
FROM nvcr.io/nvidia/distroless/python:3.12-v3.5.1
COPY --from=builder /install /usr/local
COPY --from=builder /app /app
WORKDIR /app
ENTRYPOINT ["python", "main.py"]