FROM python:3.9 # Set up a new user named "user" with user ID 1000 RUN useradd -m -u 1000 user # Switch to the "user" user USER user COPY --chown=user ./requirements.txt /api/requirements.txt COPY --chown=user ./sabiduria_tool_api /api/app WORKDIR /api RUN pip install --upgrade pip RUN pip install -r requirements.txt # Get secret EXAMPLE and output it to /test at buildtime # RUN --mount=type=secret,id=EXAMPLE,mode=0444,required=true \ # cat /run/secrets/EXAMPLE > /test # Get secret SECRET_EXAMPLE and clone it as repo at buildtime # RUN --mount=type=secret,id=SECRET_EXAMPLE,mode=0444,required=true \ # git clone $(cat /run/secrets/SECRET_EXAMPLE) CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860"]