Kodiak selfhosted, distroless, minimal, secure (zero critical cve's 01-2023), estargz format
5.6K
Kodiak selfhosted, distroless, minimal secure
FROM debian:11-slim as builder
ENV PYTHONFAULTHANDLER=1 \
PYTHONUNBUFFERED=1 \
PYTHONDONTWRITEBYTECODE=1
RUN apt-get update && \
apt-get install --no-install-suggests --no-install-recommends --yes python3-venv gcc libpython3-dev libffi-dev git && \
apt-get clean && \
rm -rf /var/lib/apt/lists/* && \
python3 -m venv /venv
FROM builder AS builder-venv
ENV PIP_NO_CACHE_DIR=on \
PIP_DISABLE_PIP_VERSION_CHECK=on \
PIP_DEFAULT_TIMEOUT=100
WORKDIR /app
COPY src/ .
RUN /venv/bin/pip install "cryptography===37.0.4" "poetry===1.1.13" && \
/venv/bin/poetry config virtualenvs.create false && \
/venv/bin/poetry install --no-interaction --no-ansi
FROM gcr.io/distroless/python3-debian11:debug-nonroot as runner
COPY --from=builder-venv /venv /venv
COPY --from=builder-venv --chown=nonroot:nonroot /app /app
WORKDIR /app
ENTRYPOINT ["/app/kodiak.sh"]
Content type
Image
Digest
sha256:ac9ef657d…
Size
46.8 MB
Last updated
over 1 year ago
docker pull cdrocker/kodiak:v0.55.0-beta.0