0
0
mirror of https://github.com/PostHog/posthog.git synced 2024-11-29 03:04:16 +01:00
posthog/production.Dockerfile
Harry Waye 5f1ab5ff74
chore(dockerfile): make docker build multistage (#10488)
* chore(dockerfile): make docker build multistage

The built image is >4GB uncompressed atm, I'm pretty sure there is a lot
of cruft.

Plan is to split out the django, frontend, plugin-server builds and
hopefully get some gains in there to not include build deps.

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* wip

* fix dockerfile lints

* cache from branch

* add load :true

* Update production.Dockerfile

Co-authored-by: James Greenhill <fuziontech@gmail.com>

* Update production.Dockerfile

* update to use compressed size from remote repo

* tag with branch and sha

* add ref on pull_request events

* install python

* be a bit more lax with python version

* fix image size calc

* hardcode lower case image name

* use @

* only add sha on master branch, add master tag on master

* chore: use docker image in e2e tests

This is to try to add some guarantees to the docker image without having
to manually test it, so we can be a bit more aggressive with
improvements without, e.g. having to push to the playground or run
locally.

* wip

* add to summary

* wip

* chore: put cypress tests after docker build

I couldn't figure out a way to get workflow_run to run without merging
in, so I'm just putting after the build.

* wip

* wip

* wip

* remove quotes

* remove separate cypress install

* wip

* wip

* wip

* add gunicorn.config.py

* ci: run docker image build on master as well

This way we get the caching from the master build.

* wip

* wip

Co-authored-by: James Greenhill <fuziontech@gmail.com>
2022-06-27 18:12:32 +01:00

158 lines
4.2 KiB
Docker

#
# This Dockerfile is used for self-hosted production builds.
#
# Note: for 'posthog/posthog-cloud' remember to update 'prod.web.Dockerfile' as appropriate
#
#
# Build the frontend artifacts
#
FROM node:16.15-alpine3.14 AS frontend
WORKDIR /code
COPY package.json yarn.lock ./
RUN yarn config set network-timeout 300000 && \
yarn install --frozen-lockfile
COPY frontend/ frontend/
COPY ./bin/ ./bin/
COPY babel.config.js tsconfig.json webpack.config.js ./
RUN yarn build
#
# Build the plugin-server artifacts. Note that we still need to install the
# runtime deps in the main image
#
FROM node:16.15-alpine3.14 AS plugin-server
WORKDIR /code/plugin-server
# Install python, make and gcc as they are needed for the yarn install
RUN apk --update --no-cache add \
"make~=4.3" \
"g++~=10.3" \
"gcc~=10.3" \
"python3~=3.9"
# Compile and install Yarn dependencies.
#
# Notes:
#
# - we explicitly COPY the files so that we don't need to rebuild
# the container every time a dependency changes
COPY ./plugin-server/package.json ./plugin-server/yarn.lock ./plugin-server/tsconfig.json ./
RUN yarn config set network-timeout 300000 && \
yarn install
# Build the plugin server
#
# Note: we run the build as a separate actions to increase
# the cache hit ratio of the layers above.
COPY ./plugin-server/src/ ./src/
RUN yarn build
# Build the posthog image, incorporating the Django app along with the frontend,
# as well as the plugin-server
FROM python:3.8.12-alpine3.14
ENV PYTHONUNBUFFERED 1
WORKDIR /code
# Install OS dependencies needed to run PostHog
#
# Note: please add in this section runtime dependences only.
# If you temporary need a package to build a Python or npm
# dependency take a look at the sections below.
RUN apk --update --no-cache add \
"libpq~=13" \
"libxslt~=1.1" \
"nodejs-current~=16" \
"chromium~=93" \
"chromium-chromedriver~=93" \
"xmlsec~=1.2"
# Compile and install Python dependencies.
#
# Notes:
#
# - we explicitly COPY the files so that we don't need to rebuild
# the container every time a dependency changes
#
# - we need few additional OS packages for this. Let's install
# and then uninstall them when the compilation is completed.
COPY requirements.txt ./
RUN apk --update --no-cache --virtual .build-deps add \
"bash~=5.1" \
"g++~=10.3" \
"gcc~=10.3" \
"cargo~=1.52" \
"git~=2" \
"make~=4.3" \
"libffi-dev~=3.3" \
"libxml2-dev~=2.9" \
"libxslt-dev~=1.1" \
"xmlsec-dev~=1.2" \
"postgresql-dev~=13" \
&& \
pip install -r requirements.txt --compile --no-cache-dir \
&& \
apk del .build-deps
RUN addgroup -S posthog && \
adduser -S posthog -G posthog
RUN chown posthog.posthog /code
USER posthog
# Add in Django deps and generate Django's static files
COPY manage.py manage.py
COPY posthog posthog/
COPY ee ee/
COPY --from=frontend /code/frontend/dist /code/frontend/dist
RUN SKIP_SERVICE_VERSION_REQUIREMENTS=1 SECRET_KEY='unsafe secret key for collectstatic only' DATABASE_URL='postgres:///' REDIS_URL='redis:///' python manage.py collectstatic --noinput
# Add in the plugin-server compiled code, as well as the runtime dependencies
WORKDIR /code/plugin-server
COPY ./plugin-server/package.json ./plugin-server/yarn.lock ./
# Switch to root and install yarn so we can install runtime deps. Node that we
# still need yarn to run the plugin-server so we do not remove it.
USER root
RUN apk --update --no-cache add "yarn~=1"
# NOTE: we need make and g++ for node-gyp
# NOTE: npm is required for re2
RUN apk --update --no-cache add "make~=4.3" "g++~=10.3" "npm~=7" --virtual .build-deps \
&& yarn install --frozen-lockfile --production=true \
&& yarn cache clean \
&& apk del .build-deps
USER posthog
# Add in the compiled plugin-server
COPY --from=plugin-server /code/plugin-server/dist/ ./dist/
WORKDIR /code/
USER root
COPY ./plugin-server/package.json ./plugin-server/
# We need bash to run the bin scripts
RUN apk --update --no-cache add "bash~=5.1"
COPY ./bin ./bin/
USER posthog
ENV CHROME_BIN=/usr/bin/chromium-browser \
CHROME_PATH=/usr/lib/chromium/ \
CHROMEDRIVER_BIN=/usr/bin/chromedriver
COPY gunicorn.config.py ./
# Expose container port and run entry point script
EXPOSE 8000
CMD ["./bin/docker"]