busya
0d05a0bd6d
- install_ca_to_nss() — imports corporate CA certs into Chromium's NSS database (~/.pki/nssdb), fixing ERR_CERT_AUTHORITY_INVALID in Playwright - libnss3-tools added to Dockerfile for certutil binary
45 lines
1.8 KiB
Docker
45 lines
1.8 KiB
Docker
# #region docker.backend.Dockerfile [C:3] [TYPE Module] [SEMANTICS docker,backend,build]
|
||
# @BRIEF Backend Dockerfile — Python 3.11 slim + Playwright + entrypoint с установкой сертификатов.
|
||
# @LAYER Infrastructure
|
||
# @RELATION DEPENDS_ON -> [EXT:path:docker/backend.entrypoint.sh]
|
||
# @RELATION DEPENDS_ON -> [EXT:path:backend/requirements.txt]
|
||
# @PRE Docker builder context — корень проекта. backend/ и docker/ доступны.
|
||
# @POST Образ с backend API, Playwright, entrypoint для bootstrap admin и установки сертификатов.
|
||
# #endregion docker.backend.Dockerfile
|
||
|
||
FROM python:3.11-slim
|
||
|
||
ENV PYTHONDONTWRITEBYTECODE=1
|
||
ENV PYTHONUNBUFFERED=1
|
||
ENV BACKEND_PORT=8000
|
||
|
||
WORKDIR /app
|
||
|
||
# Системные зависимости: ca-certificates для корп. сертификатов, libnss3-tools
|
||
# для установки CA в NSS базу Chromium, curl, git для Playwright/GitPython
|
||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||
ca-certificates \
|
||
curl \
|
||
git \
|
||
libnss3-tools \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
# Python зависимости
|
||
COPY backend/requirements.txt /app/backend/requirements.txt
|
||
RUN pip install --no-cache-dir -r /app/backend/requirements.txt
|
||
RUN python -m playwright install --with-deps chromium
|
||
|
||
# Исходный код
|
||
COPY backend/ /app/backend/
|
||
|
||
# Копируем entrypoint — установит корп. сертификаты, Playwright и сделает bootstrap admin
|
||
COPY docker/backend.entrypoint.sh /app/entrypoint.sh
|
||
RUN chmod +x /app/entrypoint.sh
|
||
|
||
WORKDIR /app/backend
|
||
|
||
EXPOSE 8000
|
||
|
||
ENTRYPOINT ["/app/entrypoint.sh"]
|
||
CMD ["python", "-m", "uvicorn", "src.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
||
# #endregion docker.backend.Dockerfile |