adam
cccc2bc004
Decouple the privileged hardware poller from web iterations so a web
redeploy can never recreate/restart the poller (the backplane-touching
container). Two images from one Dockerfile via build targets:
- jbod-poller: privileged producer, ships smartmontools/sg3-utils/ledmon,
Redis-only deps (~197MB)
- jbod-web: unprivileged read-only consumer (REST/UI/MQTT), no hardware
tools, no /dev (~147MB)
Two compose projects sharing Redis over host networking:
- compose.infra.yml (jbod-infra): poller + redis — stable substrate
- compose.web.yml (jbod-web): app — 'up -d --build' touches only app
build.sh builds/pushes both images; split requirements-{poller,web}.txt;
dropped the combined docker-compose.yml; .dockerignore excludes tmp/ (keeps
the venv and the mqtt.env creds out of the build context).
54 lines
1.4 KiB
Docker
54 lines
1.4 KiB
Docker
# ---- Stage: build frontend ----
|
|
FROM node:22-alpine AS frontend-build
|
|
WORKDIR /app/frontend
|
|
COPY frontend/package.json frontend/package-lock.json* ./
|
|
RUN npm install
|
|
COPY frontend/ ./
|
|
RUN npm run build
|
|
# Output: /app/static/
|
|
|
|
# ---- Target: poller (hardware producer) ----
|
|
# Privileged at runtime; the only image with SAS/SMART tooling. Slim Python
|
|
# deps (just Redis) — no web stack.
|
|
FROM python:3.13-slim AS poller
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
smartmontools \
|
|
sg3-utils \
|
|
lsscsi \
|
|
util-linux \
|
|
ledmon \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
COPY requirements-poller.txt .
|
|
RUN pip install --no-cache-dir -r requirements-poller.txt
|
|
|
|
COPY poller.py .
|
|
COPY services/ services/
|
|
|
|
CMD ["python", "-u", "poller.py"]
|
|
|
|
# ---- Target: web (read-only consumer) ----
|
|
# Unprivileged at runtime; no hardware tools. Serves REST/UI + MQTT, reads Redis.
|
|
FROM python:3.13-slim AS web
|
|
|
|
WORKDIR /app
|
|
|
|
COPY requirements-web.txt .
|
|
RUN pip install --no-cache-dir -r requirements-web.txt
|
|
|
|
COPY main.py .
|
|
COPY routers/ routers/
|
|
COPY services/ services/
|
|
COPY models/ models/
|
|
COPY --from=frontend-build /app/static/ static/
|
|
|
|
EXPOSE 8000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
|
|
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/api/health')" || exit 1
|
|
|
|
CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000", "--workers", "2"]
|