Move Dockerfile from devops to the repo, base image Alpine Linux
Change-Id: Id7cbb0c5bcbae9c523455994ffbeb2e743ecd563
Signed-off-by: mesaj <juanmanuel.mesamendez.ext@telefonica.com>
Signed-off-by: garciadeblas <gerardo.garciadeblas@telefonica.com>
diff --git a/Dockerfile.production b/Dockerfile.production
new file mode 100644
index 0000000..495004e
--- /dev/null
+++ b/Dockerfile.production
@@ -0,0 +1,176 @@
+# syntax=docker/dockerfile:1
+#######################################################################################
+# Copyright ETSI Contributors and Others.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#######################################################################################
+
+
+######################
+# Stage 1: Base Stage#
+######################
+
+FROM python:3.10-alpine AS base
+
+# RUN apk add --no-cache \
+# libgcc \
+# libstdc++
+
+ENV PYTHONUNBUFFERED=1 \
+ PYTHONDONTWRITEBYTECODE=1 \
+ PIP_DISABLE_PIP_VERSION_CHECK=1
+
+
+#########################################################################################################################################################################
+
+########################
+# Stage 2: Build Stage #
+########################
+
+FROM base AS build
+
+# Install required system packages
+RUN apk add --no-cache \
+ build-base \
+ git \
+ patch \
+ curl \
+ zlib-dev \
+ cdrkit \
+ linux-headers \
+ openssl \
+ openssl-dev \
+ libffi-dev \
+ libmagic \
+ cargo \
+ rust \
+ musl-dev \
+ bash \
+ openssh-client
+
+# Verify git installation
+RUN git --version
+
+WORKDIR /app/ro
+
+# Isolate dependencies in a venv
+RUN python -m venv /app/ro/.venv
+ENV PATH="/app/ro/.venv/bin:$PATH"
+
+ARG COMMON_GERRIT_REFSPEC=master
+ARG IM_GERRIT_REFSPEC=master
+
+# Install build tools
+RUN pip install -U pip setuptools wheel build
+
+RUN test -x /app/ro/.venv/bin/python && /app/ro/.venv/bin/python -c "import sys; print(sys.prefix)"
+
+# Install OSM dependency modules
+
+RUN --mount=type=cache,target=/root/.cache/pip \
+ git clone --filter=blob:none --tags https://osm.etsi.org/gerrit/osm/common.git /tmp/osm-common && \
+ cd /tmp/osm-common && \
+ git fetch origin ${COMMON_GERRIT_REFSPEC} && \
+ git checkout FETCH_HEAD && \
+ cd - && \
+ pip install -r /tmp/osm-common/requirements.txt && \
+ pip install /tmp/osm-common
+
+COPY requirements.txt ./
+
+# Install py-radix from source with a one-line patch (no build isolation)
+RUN --mount=type=cache,target=/root/.cache/pip \
+ # py-radix is installed as dependency of the ipconflict package
+ # the installation is a bit special as it is not fully compatible with Alpine library versions
+ # similar issue reported here: https://github.com/mjschultz/py-radix/issues/70
+ git clone --filter=blob:none https://github.com/mjschultz/py-radix.git /tmp/py-radix && \
+ sed -i 's/from setuptools\.dist import Version/from packaging.version import Version/' /tmp/py-radix/setup.py && \
+ pip install --no-build-isolation /tmp/py-radix && \
+ pip install -r requirements.txt
+
+RUN --mount=type=cache,target=/root/.cache/pip \
+ pip install git+https://github.com/mjschultz/py-radix.git && \
+ pip install -r requirements.txt
+
+COPY . .
+
+RUN for component in common RO-plugin NG-RO RO-VIM-* RO-SDN-*; do \
+ if [ -d "$component" ]; then \
+ python -m build $component && \
+ pip install $component/dist/*.whl; \
+ fi; \
+ done
+
+
+################################################################################################################################################################
+
+########################
+# Stage 3: Final Stage #
+########################
+
+FROM base AS final
+WORKDIR /app
+
+RUN apk add --no-cache \
+ cdrkit \
+ git \
+ curl \
+ libmagic \
+ bash
+
+RUN addgroup -g 1000 appuser && \
+ adduser -D -G appuser -u 1000 appuser -h /app appuser && \
+ mkdir -p /app/storage/kafka && \
+ mkdir -p /app/log && \
+ chown -R appuser:appuser /app
+
+USER appuser:appuser
+
+ENV VIRTUAL_ENV=/app/.venv \
+ PATH="/app/.venv/bin:$PATH"
+
+COPY --from=build --chown=appuser:appuser /app/ro/ /app/
+
+EXPOSE 9090
+
+# Database configuration
+ENV RO_DB_HOST="" \
+ RO_DB_OVIM_HOST="" \
+ RO_DB_ROOT_PASSWORD="" \
+ RO_DB_OVIM_ROOT_PASSWORD="" \
+ RO_DB_USER=mano \
+ RO_DB_OVIM_USER=mano \
+ RO_DB_PASSWORD=manopw \
+ RO_DB_OVIM_PASSWORD=manopw \
+ RO_DB_PORT=3306 \
+ RO_DB_OVIM_PORT=3306 \
+ RO_DB_NAME=mano_db \
+ RO_DB_OVIM_NAME=mano_vim_db \
+ OPENMANO_TENANT=osm
+
+# Application configuration
+ENV OSMRO_DATABASE_DRIVER=mongo \
+ OSMRO_DATABASE_URI=mongodb://mongo:27017 \
+ OSMRO_MESSAGE_DRIVER=kafka \
+ OSMRO_MESSAGE_HOST=kafka \
+ OSMRO_MESSAGE_PORT=9092 \
+ OSMRO_LOG_LEVEL=INFO
+
+# Expose ports and volumes
+VOLUME /var/log/osm
+
+# Set user and entrypoint
+USER appuser
+CMD ["python", "-u", "-m", "osm_ng_ro.ro_main"]
+