Dockerfile

# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.

# Builder stage - build the wheel
FROM ghcr.io/astral-sh/uv:debian AS builder

# Install build dependencies
RUN apt-get update --assume-yes && \
    apt-get install -o 'Dpkg::Options::=--force-confnew' -y --force-yes -q \
    gcc \
    clang \
    build-essential \
    make \
    && rm -rf /var/lib/apt/lists/*

# Set working directory
WORKDIR /build

# Copy source code
COPY . /build

# Build the wheel using uv
RUN uv build --wheel

# Runtime stage - install and run the package
FROM python:3.14.1-alpine AS runtime

# So that STDOUT/STDERR is printed
ENV PYTHONUNBUFFERED="1"


# We create the default user and group to run unprivileged
ENV OTAVA_HOME /srv/otava
WORKDIR ${OTAVA_HOME}

RUN addgroup -g 8192 otava && \
    adduser -u 8192 -G otava -s /bin/false -D -H otava && \
    chown otava:otava ${OTAVA_HOME}


# Copy uv from builder stage and the wheel
COPY --from=builder /usr/local/bin/uv /usr/local/bin/uv
COPY --from=builder /build/dist/*.whl /tmp/

# Install build dependencies, install the wheel, then remove build tools
RUN apk add --no-cache --virtual .build-deps \
    gcc \
    g++ \
    musl-dev \
    python3-dev \
    libffi-dev \
    openblas-dev \
    gfortran \
    && apk add --no-cache libstdc++ openblas \
    && uv pip install --system --no-cache /tmp/apache_otava-*.whl \
    && rm /tmp/apache_otava-*.whl \
    && apk del .build-deps \
    && rm /usr/local/bin/uv

# Switch to otava user
USER otava

# The otava command should now be available in PATH via the installed package
ENTRYPOINT ["otava"]