# Multi-stage build to create a distroless image FROM python:3.11 AS builder # Install poetry and the export plugin # RUN pip install poetry poetry-plugin-export # Create working directory WORKDIR /app # Copy dependency files COPY requirements.txt ./ # Export dependencies to requirements.txt # RUN poetry export -f requirements.txt --output requirements.txt --without-hashes # Install dependencies to a target directory that we can copy to the distroless image RUN pip install --no-cache-dir --target=/app/site-packages -r requirements.txt # Create distroless image FROM gcr.io/distroless/python3-debian12 # Copy installed packages and application from builder stage COPY --from=builder /app/site-packages /app/site-packages # Copy application code COPY index.html favicon.ico /app/ COPY myice /app/myice # Set PYTHONPATH so Python can find our installed packages ENV PYTHONPATH=/app/site-packages # Set working directory WORKDIR /app # Expose port EXPOSE 8000 USER nonroot # Run the application directly with Python using the distroless entrypoint ENTRYPOINT ["/usr/bin/python3", "-m", "uvicorn", "myice.webapi:app", "--host", "0.0.0.0", "--port", "8000"]