Dockerfile

FROM quay.io/condaforge/linux-anvil-cos7-x86_64:latest

# baseline env
ENV TMPDIR=/tmp
ENV AUTOTICK_BOT_DIR=/opt/autotick-bot

# use bash for a while to make conda manipulations easier
SHELL ["/bin/bash", "-l", "-c"]

# build the conda env first
COPY conda-lock.yml $AUTOTICK_BOT_DIR/conda-lock.yml
RUN conda activate base && \
    conda install conda-lock --yes && \
    conda-lock install -n cf-scripts $AUTOTICK_BOT_DIR/conda-lock.yml && \
    conda clean --all --yes && \
    # Lucky group gets permission to write in the conda dir
    chown -R root /opt/conda && \
    chgrp -R lucky /opt/conda && chmod -R g=u /opt/conda && \
    conda deactivate

# deal with entrypoint
COPY docker/entrypoint /opt/docker/bin/
RUN chmod +x /opt/docker/bin/entrypoint

# now install the bot code
COPY . $AUTOTICK_BOT_DIR
RUN conda activate base && \
    conda activate cf-scripts && \
    cd $AUTOTICK_BOT_DIR && \
    pip install --no-deps --no-build-isolation -e . && \
    cd - && \
    conda deactivate && \
    conda deactivate && \
    # remove .git dir once installed and version is set
    rm -rf $AUTOTICK_BOT_DIR/.git

# now make the conda user for running tasks and set the user
RUN useradd --shell /bin/bash -c "" -m conda
ENV HOME=/home/conda
ENV USER=conda
ENV LOGNAME=conda
ENV MAIL=/var/spool/mail/conda
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/home/conda/bin
RUN chown conda:conda $HOME && \
    chown -R conda:conda /opt/autotick-bot && \
    cp -R /etc/skel $HOME && \
    chown -R conda:conda $HOME/skel && \
    (ls -A1 $HOME/skel | xargs -I {} mv -n $HOME/skel/{} $HOME) && \
    rm -Rf $HOME/skel && \
    cd $HOME
USER conda

# deal with git config for user and mounted directory
RUN conda activate cf-scripts && \
    git config --global --add safe.directory /cf_feedstock_ops_dir && \
    git config --global init.defaultBranch main && \
    git config --global user.email "conda@conda.conda" && \
    git config --global user.name "conda conda" && \
    conda deactivate && \
    conda init --all --user

# put the shell back
SHELL ["/bin/sh", "-c"]