User
67d030b24d
- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml
67 lines
2.7 KiB
Docker
67 lines
2.7 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
# thothii-core: Fastify (Node 22) + harness Python 3.12 (tht CLI) + runtime Pi.
|
|
# Singolo container, entrypoint logico "server" (default).
|
|
ARG PI_VERSION=0.80.2
|
|
|
|
# ---- Stage 1: backend TypeScript -> dist ----
|
|
FROM node:22-bookworm AS backend-build
|
|
WORKDIR /src/backend
|
|
COPY backend/package*.json ./
|
|
RUN npm ci
|
|
COPY backend/ ./
|
|
RUN npm run build
|
|
|
|
# ---- Stage 2: runtime (Python 3.12 nativo + Node 22 copiato, stesso glibc bookworm) ----
|
|
FROM python:3.12-slim-bookworm AS runtime
|
|
ARG PI_VERSION
|
|
|
|
# Runtime tools
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
curl ca-certificates ripgrep fd-find tini \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& ln -s /usr/bin/fdfind /usr/local/bin/fd
|
|
|
|
# Node 22 + npm copiati dall'immagine ufficiale (stesso Debian bookworm → binario compatibile)
|
|
COPY --from=node:22-bookworm /usr/local/bin/node /usr/local/bin/node
|
|
COPY --from=node:22-bookworm /usr/local/lib/node_modules /usr/local/lib/node_modules
|
|
RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
|
|
&& ln -s /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
|
|
|
|
# Utente non-root
|
|
RUN useradd --create-home --uid 10001 --shell /bin/bash thoth
|
|
|
|
# Harness: venv nativo (python 3.12) + tht installato NON editabile (nel venv, indipendente dal path sorgente).
|
|
# psycopg2-binary è wheel → niente gcc/libpq-dev. yake/sqlglot/datasketch/pydantic hanno wheel per py3.12.
|
|
COPY harness/ /app/harness/
|
|
RUN python -m venv /opt/venv \
|
|
&& /opt/venv/bin/pip install --no-cache-dir --upgrade pip \
|
|
&& /opt/venv/bin/pip install --no-cache-dir /app/harness
|
|
# PiProcessManager (backend) prepende harnessDir/.venv/bin al PATH del child Pi → symlink al venv reale
|
|
RUN ln -s /opt/venv /app/harness/.venv
|
|
|
|
# Backend: dist + node_modules (stesso Node major 22 + glibc bookworm → compatibili)
|
|
COPY --from=backend-build /src/backend/dist /app/backend/dist
|
|
COPY --from=backend-build /src/backend/node_modules /app/backend/node_modules
|
|
COPY backend/package*.json /app/backend/
|
|
|
|
# Runtime Pi (pacchetto npm puro JS, dipendenze prebuilt). Installato come root, eseguibile da thoth.
|
|
RUN npm install -g @earendil-works/pi-coding-agent@${PI_VERSION}
|
|
|
|
ENV PATH="/opt/venv/bin:/usr/local/bin:$PATH" \
|
|
HOST=0.0.0.0 PORT=8787 \
|
|
THT_HARNESS_DIR=/app/harness \
|
|
THT_BIN=/opt/venv/bin/tht \
|
|
PI_BIN=pi \
|
|
HOME=/home/thoth
|
|
|
|
COPY docker/core-entrypoint.sh /app/docker/core-entrypoint.sh
|
|
RUN chmod +x /app/docker/core-entrypoint.sh
|
|
|
|
WORKDIR /app/backend
|
|
USER thoth
|
|
EXPOSE 8787
|
|
HEALTHCHECK --interval=15s --timeout=3s --retries=5 --start-period=30s \
|
|
CMD curl -fsS http://127.0.0.1:8787/health || exit 1
|
|
ENTRYPOINT ["/usr/bin/tini","--","/app/docker/core-entrypoint.sh"]
|
|
CMD ["server"]
|