# See https://testdriven.io/blog/docker-best-practices/ for recommendations
# on writing dockerfiles for python projects.

# We use a build stage to build wheels which we then copy and install
# in the second stage to minimize image size. This is mostly needed
# because setuptools_scm needs the full version info from git and git
# itself but including that in the final image would bloat its size.

# we are using the official python image with just a version tag here
# it comes with many tools needed to build and compile python packages
# which increases it's size but is helpful for building
FROM harbor.cta-observatory.org/proxy_cache/python:3.12 AS builder
SHELL ["/bin/bash", "-c"]

WORKDIR /repo

# Add requirements to build dependency wheels
ARG REQUIREMENTS=mock_bff/requirements.txt
COPY ${REQUIREMENTS} /repo/${REQUIREMENTS}

# build the application wheel and dependency wheels
# hadolint ignore=DL3008
RUN apt-get update && apt-get install -y --no-install-recommends git \
    && git config --global submodule.aiv-toolkit.update none \
    && python -m pip wheel --no-cache-dir --wheel-dir ./dist -r ${REQUIREMENTS} \
    && rm -rf /var/lib/apt/lists/*

# Install libsass wheel and compile SCSS to CSS at build time
COPY frontend/static/css /repo/static/css

# second stage, copy and install wheels
# We are using the official python 3.12 image
# as base image in the slim variant to reduce image size.
FROM harbor.cta-observatory.org/proxy_cache/python:3.12-slim
COPY --from=builder /repo/dist /tmp/dist

# Install all wheels (application and dependencies)
# Since the builder stage already resolved and built all dependencies (including from git),
# we can use --no-deps to install all wheels and prevent pip from parsing git URLs in package metadata.
RUN python -m pip install --no-cache-dir --no-deps /tmp/dist/*.whl \
    && rm -rf /tmp/dist \
    && addgroup --system ctao \
    && adduser --system --group ctao

USER ctao

WORKDIR /app
# Copy only runtime sources needed by the two entrypoints in this image.
COPY --chown=root:root --chmod=755 mock_bff /app/mock_bff

ENV PORT=8080
CMD ["sh", "-c", "python -m uvicorn mock_bff.app:app --host 0.0.0.0 --port $PORT --reload"]
