mirror of
https://github.com/PostHog/posthog.git
synced 2024-12-01 12:21:02 +01:00
322e253413
* add version requirements for deploying * update postgres range * postgres -> postgresql, version_range -> supported_version * updates * add test, revert ee app change * fix * fix * rename to service version requirement * add redis * remove ee requirements from ee settings * update redis v * update postgres v * Update posthog/version_requirement.py Co-authored-by: Guido Iaquinti <4038041+guidoiaquinti@users.noreply.github.com> * add SKIP_SERVICE_VERSION_REQUIREMENTS setting * add warning for skipping reqs * update redis version * skip service req checks for collecstatic * update settings Co-authored-by: Guido Iaquinti <4038041+guidoiaquinti@users.noreply.github.com>
131 lines
3.8 KiB
Docker
131 lines
3.8 KiB
Docker
#
|
|
# This Dockerfile is used for self-hosted production builds.
|
|
#
|
|
# Note: for 'posthog/posthog-cloud' remember to update 'prod.web.Dockerfile' as appropriate
|
|
#
|
|
FROM python:3.8-alpine3.14
|
|
|
|
ENV PYTHONUNBUFFERED 1
|
|
|
|
WORKDIR /code
|
|
|
|
# Install OS dependencies needed to run PostHog
|
|
#
|
|
# Note: please add in this section runtime dependences only.
|
|
# If you temporary need a package to build a Python or npm
|
|
# dependency take a look at the sections below.
|
|
RUN apk --update --no-cache add \
|
|
"bash~=5.1" \
|
|
"g++~=10.3" \
|
|
"gcc~=10.3" \
|
|
"libpq~=13" \
|
|
"libxml2-dev~=2.9" \
|
|
"libxslt~=1.1" \
|
|
"libxslt-dev~=1.1" \
|
|
"make~=4.3" \
|
|
"nodejs~=14" \
|
|
"npm~=7" \
|
|
&& npm install -g yarn@1
|
|
|
|
# Install SAML dependencies
|
|
#
|
|
# Notes:
|
|
#
|
|
# - please add in this section runtime dependences only.
|
|
# If you temporary need a package to build a Python or npm
|
|
# dependency take a look at the sections below.
|
|
#
|
|
# - we would like to include those dependencies + 'python3-saml'
|
|
# directly in the requirements.txt file but due to our CI/CD
|
|
# setup this is currently not possible. More context at:
|
|
# https://github.com/PostHog/posthog/pull/5870
|
|
# https://github.com/PostHog/posthog/pull/6575#discussion_r733457836
|
|
# https://github.com/PostHog/posthog/pull/6607
|
|
#
|
|
RUN apk --update --no-cache add \
|
|
"libxml2-dev~=2.9" \
|
|
"xmlsec~=1.2" \
|
|
"xmlsec-dev~=1.2" \
|
|
&& \
|
|
pip install python3-saml==1.12.0 --compile --no-cache-dir
|
|
|
|
# Compile and install Python dependencies.
|
|
#
|
|
# Notes:
|
|
#
|
|
# - we explicitly COPY the files so that we don't need to rebuild
|
|
# the container every time a dependency changes
|
|
#
|
|
# - we need few additional OS packages for this. Let's install
|
|
# and then uninstall them when the compilation is completed.
|
|
COPY requirements.txt ./
|
|
RUN apk --update --no-cache --virtual .build-deps add \
|
|
"cargo~=1.52" \
|
|
"git~=2" \
|
|
"libffi-dev~=3.3" \
|
|
"postgresql-dev~=13" \
|
|
&& \
|
|
pip install -r requirements.txt --compile --no-cache-dir \
|
|
&& \
|
|
apk del .build-deps
|
|
|
|
# Compile and install Yarn dependencies.
|
|
#
|
|
# Notes:
|
|
#
|
|
# - we explicitly COPY the files so that we don't need to rebuild
|
|
# the container every time a dependency changes
|
|
#
|
|
# - we need few additional OS packages for this. Let's install
|
|
# and then uninstall them when the compilation is completed.
|
|
COPY package.json yarn.lock ./
|
|
COPY ./plugin-server/ ./plugin-server/
|
|
RUN apk --update --no-cache --virtual .build-deps add \
|
|
"gcc~=10.3" \
|
|
&& \
|
|
yarn config set network-timeout 300000 && \
|
|
yarn install --frozen-lockfile && \
|
|
yarn install --frozen-lockfile --cwd plugin-server && \
|
|
yarn cache clean \
|
|
&& \
|
|
apk del .build-deps
|
|
|
|
# Copy everything else
|
|
COPY . .
|
|
|
|
# Build the plugin server
|
|
#
|
|
# Note: we run the build as a separate actions to increase
|
|
# the cache hit ratio of the layers above.
|
|
# symlink musl -> ld-linux is required for re2 compat on alpine
|
|
RUN cd plugin-server \
|
|
&& ln -s /lib/ld-musl-x86_64.so.1 /lib/ld-linux-x86-64.so.2 \
|
|
&& yarn build \
|
|
&& yarn cache clean \
|
|
&& cd ..
|
|
|
|
# Build the frontend
|
|
#
|
|
# Note: we run the build as a separate actions to increase
|
|
# the cache hit ratio of the layers above.
|
|
RUN yarn build && \
|
|
yarn cache clean && \
|
|
rm -rf ./node_modules
|
|
|
|
# Generate Django's static files
|
|
RUN SKIP_SERVICE_VERSION_REQUIREMENTS=1 SECRET_KEY='unsafe secret key for collectstatic only' DATABASE_URL='postgres:///' REDIS_URL='redis:///' python manage.py collectstatic --noinput
|
|
|
|
# Add a dedicated 'posthog' user and group, move files into its home dir and set the
|
|
# proper file permissions. This alleviates compliance issue for not running a
|
|
# container as 'root'
|
|
RUN addgroup -S posthog && \
|
|
adduser -S posthog -G posthog && \
|
|
mv /code /home/posthog && \
|
|
chown -R posthog:1000 /home/posthog/code
|
|
WORKDIR /home/posthog/code
|
|
USER posthog
|
|
|
|
# Expose container port and run entry point script
|
|
EXPOSE 8000
|
|
CMD ["./bin/docker"]
|