FROM python:3.8.16-alpine3.17 as base

WORKDIR /usr/cycode/app

RUN apk add git=2.38.5-r0

FROM base as builder

ENV POETRY_VERSION=1.4.2

RUN apk add --no-cache --virtual .build-deps gcc=12.2.1_git20220924-r4 libffi-dev=3.4.4-r0 musl-dev=1.2.3-r4 && \

pip install --no-cache-dir "poetry==$POETRY_VERSION" "poetry-dynamic-versioning[plugin]" && \

apk del .build-deps gcc libffi-dev musl-dev

COPY pyproject.toml poetry.lock README.md ./

COPY .git ./.git

COPY cycode ./cycode

RUN poetry config virtualenvs.in-project true && \

poetry --no-cache install --only=main --no-root && \

poetry build

FROM base as final

COPY --from=builder /usr/cycode/app/dist ./

RUN pip install --no-cache-dir cycode*.whl

RUN addgroup -g 5000 cycode-group

RUN adduser --home /home/cycode --uid 5001 -G cycode-group --shell /bin/sh --disabled-password cycode

USER cycode

CMD ["cycode"]