nfel
47fa0229b3
The Playwright Noble image ships Python but not pip or uv in PATH. Install uv directly via curl, then run uv sync natively so the venv targets this image's Python 3.12 instead of copying a broken 3.11 venv. Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
90 lines
3.2 KiB
Docker
90 lines
3.2 KiB
Docker
# Usage:
|
|
# make build # admin + worker — uses python:3.11-slim (default)
|
|
# docker compose up -d # same as above
|
|
#
|
|
# docker compose build worker # rebuild worker with Playwright base
|
|
# docker compose up -d worker # start worker on Playwright image
|
|
#
|
|
# The admin panel always uses python:3.11-slim (no Chrome needed).
|
|
# The worker uses mcr.microsoft.com/playwright:v1.62.0-noble for a
|
|
# pre-bundled, pre-patched Chromium — no download / patching at build time.
|
|
|
|
# ── Build args ─────────────────────────────────────────────────────────────────
|
|
ARG BASE_IMAGE=python:3.11-slim
|
|
|
|
# ── Stage 1: dependency resolver ─────────────────────────────────────────────
|
|
FROM python:3.11-slim AS builder
|
|
|
|
# Keep the build independent of GHCR; dependencies already use official PyPI.
|
|
RUN pip install --no-cache-dir uv==0.11.31
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy only dependency manifests first (cache layer)
|
|
COPY pyproject.toml uv.lock* ./
|
|
|
|
# Install deps into an isolated prefix so we can copy them cleanly
|
|
RUN uv sync --frozen --no-dev --no-install-project
|
|
|
|
# ── Stage 2a: admin runtime (python:3.11-slim, no Chrome) ────────────────────
|
|
FROM ${BASE_IMAGE} AS admin
|
|
|
|
WORKDIR /app
|
|
|
|
ENV PATH="/app/.venv/bin:$PATH" \
|
|
PYTHONUNBUFFERED=1 \
|
|
PYTHONDONTWRITEBYTECODE=1
|
|
|
|
COPY . .
|
|
COPY --from=builder /app/.venv /app/.venv
|
|
|
|
RUN mkdir -p data logs recordings \
|
|
&& useradd -m -u 1001 seed \
|
|
&& chown -R seed:seed /app
|
|
|
|
USER seed
|
|
|
|
EXPOSE 8000
|
|
|
|
CMD ["python", "main.py", "admin"]
|
|
|
|
# ── Stage 2b: worker runtime (Playwright image with Chromium) ────────────────
|
|
# The Playwright Noble image ships Python 3.12. Copying a venv built with
|
|
# python:3.11-slim would produce broken shebangs — so we build the venv here.
|
|
FROM oci.reg.darano.ir/mcr.microsoft.com/playwright:v1.62.0-noble AS worker
|
|
|
|
ENV PATH="/app/.venv/bin:$PATH" \
|
|
PYTHONUNBUFFERED=1 \
|
|
PYTHONDONTWRITEBYTECODE=1 \
|
|
# Playwright's Chromium binary
|
|
CHROME_BINARY=/usr/bin/chromium \
|
|
CHROMEDRIVER_PATH=/usr/bin/chromedriver \
|
|
# Always run headless inside Docker
|
|
HEADLESS=true
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy manifests + lockfile first (stable cache layer)
|
|
COPY pyproject.toml uv.lock* ./
|
|
|
|
# Install deps natively so the venv targets this image's Python
|
|
# (Playwright Noble ships uv via entrypoint shim but not in PATH)
|
|
RUN curl -LsSf https://astral.sh/uv/install.sh | sh 2>&1
|
|
ENV PATH="/root/.local/bin:$PATH"
|
|
|
|
RUN uv sync --frozen --no-dev --no-install-project
|
|
|
|
# Copy app code (busts cache on code changes, not deps)
|
|
COPY . .
|
|
|
|
# Playwright's Chromium is already downloaded and pre-patched with
|
|
# undetected-chromedriver-friendly modifications, so no patch_driver run needed.
|
|
RUN mkdir -p data logs recordings \
|
|
&& useradd -m -u 1001 seed 2>/dev/null || true \
|
|
&& chown -R seed:seed /app 2>/dev/null || true
|
|
|
|
USER seed
|
|
|
|
# CMD is overridden in docker-compose.yml to use RQ worker
|
|
CMD ["rq", "worker", "--url", "redis://redis:6379/0", "batch"]
|