Update Dockerfile
Browse files- Dockerfile +4 -5
Dockerfile
CHANGED
|
@@ -1,7 +1,6 @@
|
|
| 1 |
# Multi-stage Docker build for Phoenix Fury API v7.0
|
| 2 |
FROM python:3.11-slim as builder
|
| 3 |
|
| 4 |
-
# Set environment variables for Python optimization
|
| 5 |
ENV PYTHONUNBUFFERED=1 \
|
| 6 |
PYTHONDONTWRITEBYTECODE=1 \
|
| 7 |
PIP_NO_CACHE_DIR=1 \
|
|
@@ -12,16 +11,17 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
| 12 |
gcc \
|
| 13 |
g++ \
|
| 14 |
make \
|
|
|
|
|
|
|
| 15 |
&& rm -rf /var/lib/apt/lists/*
|
| 16 |
|
| 17 |
# Copy requirements and install Python dependencies
|
| 18 |
COPY requirements.txt /tmp/
|
| 19 |
-
RUN pip install --user -r /tmp/requirements.txt
|
| 20 |
|
| 21 |
# Final stage
|
| 22 |
FROM python:3.11-slim
|
| 23 |
|
| 24 |
-
# Set environment variables
|
| 25 |
ENV PYTHONUNBUFFERED=1 \
|
| 26 |
PYTHONDONTWRITEBYTECODE=1 \
|
| 27 |
PATH=/root/.local/bin:$PATH
|
|
@@ -41,7 +41,6 @@ WORKDIR /app
|
|
| 41 |
COPY main.py /app/
|
| 42 |
|
| 43 |
# Grant raw socket capabilities (for L4 attacks without full root)
|
| 44 |
-
# Note: Container must still run with --cap-add=NET_RAW or privileged mode
|
| 45 |
RUN setcap cap_net_raw+ep /usr/local/bin/python3.11 || true
|
| 46 |
|
| 47 |
# Expose API port
|
|
@@ -52,4 +51,4 @@ HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
| 52 |
CMD python3 -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/').read()" || exit 1
|
| 53 |
|
| 54 |
# Run the application
|
| 55 |
-
CMD ["python3", "main.py"]
|
|
|
|
| 1 |
# Multi-stage Docker build for Phoenix Fury API v7.0
|
| 2 |
FROM python:3.11-slim as builder
|
| 3 |
|
|
|
|
| 4 |
ENV PYTHONUNBUFFERED=1 \
|
| 5 |
PYTHONDONTWRITEBYTECODE=1 \
|
| 6 |
PIP_NO_CACHE_DIR=1 \
|
|
|
|
| 11 |
gcc \
|
| 12 |
g++ \
|
| 13 |
make \
|
| 14 |
+
libffi-dev \
|
| 15 |
+
python3-dev \
|
| 16 |
&& rm -rf /var/lib/apt/lists/*
|
| 17 |
|
| 18 |
# Copy requirements and install Python dependencies
|
| 19 |
COPY requirements.txt /tmp/
|
| 20 |
+
RUN pip install --user --no-cache-dir -r /tmp/requirements.txt
|
| 21 |
|
| 22 |
# Final stage
|
| 23 |
FROM python:3.11-slim
|
| 24 |
|
|
|
|
| 25 |
ENV PYTHONUNBUFFERED=1 \
|
| 26 |
PYTHONDONTWRITEBYTECODE=1 \
|
| 27 |
PATH=/root/.local/bin:$PATH
|
|
|
|
| 41 |
COPY main.py /app/
|
| 42 |
|
| 43 |
# Grant raw socket capabilities (for L4 attacks without full root)
|
|
|
|
| 44 |
RUN setcap cap_net_raw+ep /usr/local/bin/python3.11 || true
|
| 45 |
|
| 46 |
# Expose API port
|
|
|
|
| 51 |
CMD python3 -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/').read()" || exit 1
|
| 52 |
|
| 53 |
# Run the application
|
| 54 |
+
CMD ["python3", "main.py"]
|