Mercurial > p > roundup > code
comparison scripts/Docker/Dockerfile @ 7149:282ba72a5615
pin python image versions using sha256 sum
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Thu, 16 Feb 2023 21:56:08 -0500 |
| parents | 59908110ccc9 |
| children | f636acd7d63c |
comparison
equal
deleted
inserted
replaced
| 7148:cc49ac11850f | 7149:282ba72a5615 |
|---|---|
| 20 | 20 |
| 21 # Python version as a.b Used for installation directory and | 21 # Python version as a.b Used for installation directory and |
| 22 # COPY from install dir in second stage. | 22 # COPY from install dir in second stage. |
| 23 ARG pythonversion=3.11 | 23 ARG pythonversion=3.11 |
| 24 | 24 |
| 25 FROM python:3-alpine as build | 25 #FROM python:3-alpine |
| 26 FROM python@sha256:1c7b5a998076ab7aa0a8745ab1461441a5bdc61e366985b9bfe3f4044c2b4503 as build | |
| 26 | 27 |
| 27 # Inherit global values https://github.com/moby/moby/issues/37345 | 28 # Inherit global values https://github.com/moby/moby/issues/37345 |
| 28 ARG appdir | 29 ARG appdir |
| 29 | 30 |
| 30 WORKDIR $appdir | 31 WORKDIR $appdir |
| 125 ARG pip_mod | 126 ARG pip_mod |
| 126 RUN if [ -n "$pip_mod" ]; then pip install --no-cache-dir ${pip_mod}; fi | 127 RUN if [ -n "$pip_mod" ]; then pip install --no-cache-dir ${pip_mod}; fi |
| 127 | 128 |
| 128 # build a new smaller docker image for execution. Build image above | 129 # build a new smaller docker image for execution. Build image above |
| 129 # is 1G in size. | 130 # is 1G in size. |
| 130 FROM python:3-alpine | 131 # FROM python:3-alpine |
| 132 FROM python@sha256:1c7b5a998076ab7aa0a8745ab1461441a5bdc61e366985b9bfe3f4044c2b4503 | |
| 131 | 133 |
| 132 # import from global | 134 # import from global |
| 133 ARG appdir | 135 ARG appdir |
| 134 | 136 |
| 135 WORKDIR $appdir | 137 WORKDIR $appdir |