mirror of
https://github.com/livebook-dev/livebook.git
synced 2024-09-20 10:05:57 +08:00
101 lines
3 KiB
Docker
101 lines
3 KiB
Docker
ARG BASE_IMAGE
|
|
|
|
# Stage 1
|
|
# Builds the Livebook release
|
|
FROM ${BASE_IMAGE} AS build
|
|
|
|
RUN apt-get update && apt-get upgrade -y && \
|
|
apt-get install --no-install-recommends -y \
|
|
build-essential git && \
|
|
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && \
|
|
apt-get clean -y && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
# This flag disables JIT behaviour that causes a segfault under QEMU.
|
|
# Note that we set this runtime flag only during the build stage and
|
|
# it has no impact when running the final image. See [1] for more
|
|
# information.
|
|
#
|
|
# [1]: https://github.com/erlang/otp/pull/6340
|
|
ENV ERL_FLAGS="+JMsingle true"
|
|
|
|
# Install hex and rebar
|
|
RUN mix local.hex --force && \
|
|
mix local.rebar --force
|
|
|
|
# Build for production
|
|
ENV MIX_ENV=prod
|
|
|
|
# Install mix dependencies
|
|
COPY mix.exs mix.lock ./
|
|
COPY config config
|
|
RUN mix do deps.get, deps.compile
|
|
|
|
# Compile and build the release
|
|
COPY rel rel
|
|
COPY static static
|
|
COPY iframe/priv/static/iframe iframe/priv/static/iframe
|
|
COPY proto proto
|
|
COPY lib lib
|
|
# We need README.md during compilation
|
|
# (look for @external_resource "README.md")
|
|
COPY README.md README.md
|
|
RUN mix do compile, release livebook
|
|
|
|
# Stage 2
|
|
# Prepares the runtime environment and copies over the release.
|
|
# We use the same base image, because we need Erlang, Elixir and Mix
|
|
# during runtime to spawn the Livebook standalone runtimes.
|
|
# Consequently the release doesn't include ERTS as we have it anyway.
|
|
FROM ${BASE_IMAGE}
|
|
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update && apt-get upgrade -y && \
|
|
apt-get install --no-install-recommends -y \
|
|
# Runtime dependencies
|
|
build-essential ca-certificates libncurses5-dev \
|
|
# In case someone uses `Mix.install/2` and point to a git repo
|
|
git \
|
|
# Additional standard tools
|
|
wget \
|
|
# In case someone uses Torchx for Nx
|
|
cmake && \
|
|
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && \
|
|
apt-get clean -y && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Run in the /data directory by default, makes for
|
|
# a good place for the user to mount local volume
|
|
WORKDIR /data
|
|
|
|
ENV HOME=/home/livebook
|
|
# Make sure someone running the container with `--user`
|
|
# has permissions to the home dir (for `Mix.install/2` cache)
|
|
RUN mkdir $HOME && chmod 777 $HOME
|
|
|
|
# Install hex and rebar for `Mix.install/2` and Mix runtime
|
|
RUN mix local.hex --force && \
|
|
mix local.rebar --force
|
|
|
|
# Override the default 127.0.0.1 address, so that the app
|
|
# can be accessed outside the container by binding ports
|
|
ENV LIVEBOOK_IP="::"
|
|
|
|
ENV LIVEBOOK_HOME=/data
|
|
|
|
# Copy the release build from the previous stage
|
|
COPY --from=build /app/_build/prod/rel/livebook /app
|
|
|
|
# Make release files available to any user, in case someone
|
|
# runs the container with `--user`
|
|
RUN chmod -R go=u /app
|
|
# Make all home files available (specifically .mix/)
|
|
RUN chmod -R go=u $HOME
|
|
|
|
HEALTHCHECK CMD wget --no-verbose --tries=1 --spider http://localhost:${LIVEBOOK_PORT-8080}/public/health || exit 1
|
|
|
|
CMD [ "/app/bin/server" ]
|