Browse Source

Rewrite Dockerfile

There were a couple problems with the current dockerfile:

* It set the userid of the processes running in the container to 9999,
without creating a user with that ID. This leads to confusion and an
annoying message when you run an interactive bash session (the shell PS1
would display something like `I have no name!@1438586f786e:~$`
* It tried to run `chown` on _all_ code files after running NPM install.
This takes a really long time
* It did not copy `package.json` and run `npm install` before copying
other files. This means even a one line code change causes the image
rebuild process to re-run `npm install`, which takes 30 seconds or so

Now the image creates and uses a pelias user, sets permissions correctly
from the start to avoid `chown`, and only runs `npm install` when it
absolutely has to.
pull/1096/head
Julian Simioni 7 years ago
parent
commit
a3e8ae918b
No known key found for this signature in database
GPG Key ID: B9EEB0C6EE0910A1
  1. 22
      Dockerfile

22
Dockerfile

@ -1,5 +1,7 @@
# base image # base image
FROM pelias/baseimage FROM pelias/baseimage
RUN useradd -ms /bin/bash pelias
USER pelias
# maintainer information # maintainer information
LABEL maintainer="pelias.team@gmail.com" LABEL maintainer="pelias.team@gmail.com"
@ -7,23 +9,17 @@ LABEL maintainer="pelias.team@gmail.com"
EXPOSE 3100 EXPOSE 3100
# Where the app is built and run inside the docker fs # Where the app is built and run inside the docker fs
ENV WORK=/opt/pelias ENV WORK=/home/pelias
WORKDIR ${WORK}
# Used indirectly for saving npm logs etc. # copy package.json first to prevent npm install being rerun when only code changes
ENV HOME=/opt/pelias COPY ./package.json ${WORK}
RUN npm install
WORKDIR ${WORK}
COPY . ${WORK} COPY . ${WORK}
# Build and set permissions for arbitrary non-root user # only allow containers to succeed if tests pass
RUN npm install && \ RUN npm test
npm test && \
chmod -R a+rwX .
# Don't run as root, because there's no reason to (https://docs.docker.com/engine/articles/dockerfile_best-practices/#user).
# This also reveals permission problems on local Docker.
RUN chown -R 9999:9999 ${WORK}
USER 9999
# start service # start service
CMD [ "npm", "start" ] CMD [ "npm", "start" ]

Loading…
Cancel
Save