Create Dockerfile

Dockerfile

@@ -0,0 +1,86 @@
+# VM Management API with Podman - Non-privileged Container
+FROM ubuntu:22.04
+
+# Set environment variables
+ENV DEBIAN_FRONTEND=noninteractive
+ENV PYTHONUNBUFFERED=1
+
+RUN apt-get update -qq && \
+    apt-get install -y -qq \
+        curl \
+        python3 \
+        python3-pip \
+        python3-dev \
+        build-essential \
+        ca-certificates \
+        gnupg \
+        lsb-release \
+        uidmap \
+        slirp4netns \
+        iptables \
+        && \
+    curl -fsSL https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_$(lsb_release -rs)/Release.key | \
+        gpg --dearmor | tee /etc/apt/keyrings/devel_kubic_libcontainers_stable.gpg > /dev/null && \
+    echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/devel_kubic_libcontainers_stable.gpg] \
+        https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_$(lsb_release -rs)/ /" | \
+        tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list > /dev/null && \
+    apt-get update -qq && \
+    apt-get install -y -qq podman && \
+    # Clean up
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
+# Create a non-root user for running podman rootlessly
+RUN useradd -m -s /bin/bash vmuser && \
+    usermod -aG sudo vmuser && \
+    echo "vmuser ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+
+# Configure podman for rootless operation
+USER vmuser
+WORKDIR /home/vmuser
+
+# Set up podman configuration
+RUN mkdir -p ~/.config/containers && \
+    echo '[registries.search]' > ~/.config/containers/registries.conf && \
+    echo 'registries = ["docker.io", "quay.io", "registry.fedoraproject.org"]' >> ~/.config/containers/registries.conf && \
+    echo '' >> ~/.config/containers/registries.conf && \
+    echo '[registries.insecure]' >> ~/.config/containers/registries.conf && \
+    echo 'registries = []' >> ~/.config/containers/registries.conf && \
+    echo '' >> ~/.config/containers/registries.conf && \
+    echo '[registries.block]' >> ~/.config/containers/registries.conf && \
+    echo 'registries = []' >> ~/.config/containers/registries.conf
+
+# Set up podman storage
+RUN mkdir -p ~/.local/share/containers/storage
+
+# Copy application files
+USER root
+COPY . /app
+RUN chown -R vmuser:vmuser /app
+
+USER vmuser
+WORKDIR /app
+
+# Install Python dependencies
+RUN pip3 install --user flask flask-cors requests
+
+# Create directory for podman volumes (if needed)
+RUN mkdir -p /tmp/vm-data
+
+# Expose the port (7860 as configured)
+EXPOSE 7860
+
+# Set environment variables for podman
+ENV XDG_RUNTIME_DIR=/tmp/runtime-vmuser
+ENV DBUS_SESSION_BUS_ADDRESS=unix:path=/tmp/runtime-vmuser/bus
+
+# Create runtime directory
+RUN mkdir -p $XDG_RUNTIME_DIR && \
+    chmod 700 $XDG_RUNTIME_DIR
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+    CMD curl -f http://localhost:7860/ || exit 1
+
+# Run the VM server
+CMD ["python3", "lib.py", "server"]