Dockerfile

FROM debian:bookworm-slim

WORKDIR /app

COPY . /app

RUN apt-get update

RUN apt-get install -y gcc musl-dev python3-dev python3-pip

# Resolving libcurl vulnerability https://security-tracker.debian.org/tracker/CVE-2023-23914
RUN apt-get install -y libcurl4>=7.88.1-9 curl>=7.88.1-9

# Resolving libaom vulnerabilities:
#  - https://security-tracker.debian.org/tracker/CVE-2021-30473
#  - https://security-tracker.debian.org/tracker/CVE-2021-30474
#  - https://security-tracker.debian.org/tracker/CVE-2021-30475
RUN apt-get install -y libaom-dev>=3.6.0-1

RUN python3 -m pip install --break-system-packages --upgrade pip && \
    pip install  --break-system-packages -r requirements.txt && \
    pip install  --break-system-packages '.[dev]'

ENV SWOOP_ACCESS_KEY_ID=$SWOOP_ACCESS_KEY_ID  \
    SWOOP_SECRET_ACCESS_KEY=$SWOOP_ACCESS_KEY_ID  \
    SWOOP_S3_ENDPOINT=$SWOOP_S3_ENDPOINT  \
    SWOOP_BUCKET_NAME=$SWOOP_BUCKET_NAME  \
    SWOOP_EXECUTION_DIR=$SWOOP_EXECUTION_DIR  \
    SWOOP_WORKFLOW_CONFIG_FILE=$SWOOP_WORKFLOW_CONFIG_FILE \
    PGDATABASE=$PGDATABASE \
    PGHOST=$PGHOST \
    PGUSER=$PGUSER

RUN env

CMD ["uvicorn", "swoop.api.main:app", "--host", "0.0.0.0", "--port", "8000"]