Dockerfile

FROM python:3.7-slim-stretch

# install some tools we want in the image
RUN apt-get update && apt-get -y install mysql-client git

# set up users and directories
ENV PROJECT pyspaceship
ENV HOME /srv/$PROJECT
ENV USER $PROJECT
RUN adduser --system --group --home $HOME --disabled-password $USER
USER $USER

# create the place where the secrets will go
RUN mkdir $HOME/secrets
VOLUME $HOME/secrets

# the place where the code will go
ENV CODE_DIR $HOME/code
RUN mkdir $CODE_DIR
WORKDIR $CODE_DIR

## want the binaries installed with 'pip --user' in the PATH
ENV PATH "$HOME/.local/bin:$PATH"

# install python dependencies
COPY ./requirements.txt .
RUN pip install --user -r requirements.txt

# copy the code into the image!
# We have to hardcode the user name because Docker doesn't expand variables
# within the chown flag. This is fixed in Docker master but needs to be
# released. See https://github.com/moby/moby/issues/35018.
# TODO: Use the $USER variable after updating Docker.
COPY --chown=pyspaceship:pyspaceship . $CODE_DIR

# build the assets and asset manifest
RUN IN_BUILD=True FLASK_APP=spaceship flask assets build

# set this to 'production' in production deploys
ENV ENVIRONMENT dev

ENTRYPOINT ["inv"]
CMD ["--list"]

EXPOSE 9876/tcp