From 0a014e21bfabcaa665187e03dcef06e5345cf5bc Mon Sep 17 00:00:00 2001 From: Hang Date: Sat, 22 Aug 2026 02:13:07 +0100 Subject: [PATCH] ci: update Dockerfile --- Dockerfile | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/Dockerfile b/Dockerfile index 96dd55da..859c010d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -36,20 +36,17 @@ COPY . /app RUN --mount=type=cache,target=/root/.cache/uv \ uv sync --frozen --no-dev -RUN python manage.py collectstatic --noinput +RUN uv run python manage.py collectstatic --noinput FROM python:3.10-slim-trixie -COPY --from=builder /app /app +RUN addgroup --system app \ + && adduser --system --group app +COPY --from=builder --chown=app:app /app /app WORKDIR /app ENV PYTHONDONTWRITEBYTECODE=1 \ PYTHONUNBUFFERED=1 ENV PATH="/app/.venv/bin:$PATH" -# Create non-root user and run as it -RUN addgroup --system app \ - && adduser --system --group app \ - && chown -R app:app /app USER app - EXPOSE 8000 CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "3", "PyRIGS.wsgi"] \ No newline at end of file