| # debian.sh --arch 'amd64' out/ 'bookworm' '@1779062400' |
| RUN /bin/sh -c apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends openssl libengine-gost-openssl python3 python3-pip python3-venv ca-certificates curl && rm -rf /var/lib/apt/lists/* # buildkit |
| COPY openssl-gost.cnf /etc/ssl/openssl-gost.cnf # buildkit |
| ENV OPENSSL_CONF=/etc/ssl/openssl-gost.cnf |
| ENV VENV=/opt/venv |
| RUN /bin/sh -c python3 -m venv $VENV # buildkit |
| ENV PATH=/opt/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| COPY requirements.txt /app/requirements.txt # buildkit |
| RUN /bin/sh -c pip install --no-cache-dir -r /app/requirements.txt # buildkit |
| COPY app /app/app # buildkit |
| COPY tests /app/tests # buildkit |
| COPY trust /app/trust # buildkit |
| WORKDIR /app |
| EXPOSE [8000/tcp] |
| RUN /bin/sh -c openssl engine gost -t 2>&1 | grep -q "available" || (echo "GOST engine NOT available" && exit 1) # buildkit |
| RUN /bin/sh -c useradd --system --no-create-home --uid 10001 esign && mkdir -p /tmp/esign && chown esign:esign /tmp/esign # buildkit |
| USER esign |
| CMD ["uvicorn" "app.main:app" "--host" "0.0.0.0" "--port" "8000"] |
