bot-backend
751059cb01
Build-verify on the deploy host (2026-05-31) showed the camoufox Firefox build landed in /root/.cache/camoufox (RUN python -m camoufox fetch ran as root), but the runtime app user (uid 1000) resolves the cache to /home/app/.cache/camoufox → 'browser not found' the moment scraper_fetch_mode flips to browser. Fix: run the fetch AFTER USER app + set explicit ENV HOME=/home/app (Docker does not auto-set HOME from USER, and camoufox/platformdirs keys the cache off $HOME). Now build-time fetch and runtime both use /home/app/.cache/camoufox. Verified: A) 'camoufox path' as app = /home/app/.cache/camoufox; B) that dir was empty pre-fix while /root/.cache was root-only (Permission denied to app). Dormant change — scraper_fetch_mode default stays curl_cffi (no runtime behavior change), unblocks Phase 1 (#883). Refs #884, #883
73 lines
2.4 KiB
Docker
73 lines
2.4 KiB
Docker
# Trade-In MVP backend — lean image (FastAPI + WeasyPrint).
|
||
# Не содержит Playwright/Chromium/Celery/Redis — только то что нужно для trade-in feature.
|
||
|
||
# ---- builder ----
|
||
FROM python:3.12-slim AS builder
|
||
|
||
ENV PYTHONUNBUFFERED=1 \
|
||
PYTHONDONTWRITEBYTECODE=1 \
|
||
UV_COMPILE_BYTECODE=1 \
|
||
UV_LINK_MODE=copy
|
||
|
||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||
apt-get update && apt-get install -y --no-install-recommends \
|
||
build-essential \
|
||
libpq-dev
|
||
|
||
RUN pip install --no-cache-dir uv
|
||
|
||
WORKDIR /app
|
||
|
||
COPY pyproject.toml ./
|
||
RUN --mount=type=cache,target=/root/.cache/uv \
|
||
uv sync --no-dev
|
||
|
||
COPY app ./app
|
||
COPY scripts ./scripts
|
||
|
||
|
||
# ---- runner ----
|
||
FROM python:3.12-slim AS runner
|
||
|
||
ENV PYTHONUNBUFFERED=1 \
|
||
PYTHONDONTWRITEBYTECODE=1 \
|
||
PATH="/app/.venv/bin:$PATH"
|
||
|
||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||
apt-get update && apt-get install -y --no-install-recommends \
|
||
libpq5 \
|
||
libcairo2 \
|
||
libpango-1.0-0 \
|
||
libpangoft2-1.0-0 \
|
||
fonts-dejavu-core \
|
||
curl \
|
||
libgtk-3-0 \
|
||
libasound2 \
|
||
libdbus-glib-1-2 \
|
||
libx11-xcb1 \
|
||
libxtst6 \
|
||
&& useradd --create-home --uid 1000 app
|
||
|
||
WORKDIR /app
|
||
|
||
COPY --from=builder --chown=app:app /app/.venv /app/.venv
|
||
COPY --from=builder --chown=app:app /app/app /app/app
|
||
COPY --from=builder --chown=app:app /app/scripts /app/scripts
|
||
|
||
USER app
|
||
|
||
# HOME должен быть явным: Docker НЕ выставляет $HOME по USER, а camoufox/platformdirs
|
||
# резолвит кэш Firefox как $HOME/.cache/camoufox. Без этого fetch (под root) клал браузер
|
||
# в /root/.cache, а рантайм-app искал в /home/app/.cache → "browser not found" в browser-mode.
|
||
# (подтверждено сборкой+прогоном образа на деплой-хосте 2026-05-31, баг из #884.)
|
||
ENV HOME=/home/app
|
||
|
||
# Загружаем Firefox-сборку для camoufox (#884) — ПОД app-юзером, чтобы кэш совпал с рантаймом.
|
||
# Слой кешируется: пересобирается только при изменении .venv (обновление camoufox). ~960MB.
|
||
RUN python -m camoufox fetch
|
||
|
||
EXPOSE 8000
|
||
|
||
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
|