Florian 7fd82a6004
All checks were successful
Build & Publish to GHCR / build (push) Successful in 1m27s
Hardened Dockerfile
Switched to multi stage process to harden the Dockerfile
2025-11-04 10:05:22 +01:00

19 lines
500 B
Docker

# Builder stage
FROM python:3.12-slim AS builder
RUN apt-get update \
&& apt-get install -y --no-install-recommends git build-essential \
&& rm -rf /var/lib/apt/lists/*
WORKDIR /install
COPY requirements.txt .
RUN pip install --prefix=/install --no-cache-dir -r requirements.txt
WORKDIR /app
COPY src/ /app/
# Runtime image
FROM nvcr.io/nvidia/distroless/python:3.12-v3.5.1
COPY --from=builder /install /usr/local
COPY --from=builder /app /app
WORKDIR /app
ENTRYPOINT ["python", "main.py"]