Dockerfile

# Use a Python image with uv pre-installed
FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim AS uv

ARG SQLITE_VERSION=sqlite-autoconf-3500400
# Install git
RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*


RUN apt-get update && \
    apt-get install -y --no-install-recommends \
      build-essential \
      wget \
      libreadline-dev \
      libssl-dev \
      zlib1g-dev \
      # for tests or optional stuff, if needed:
      tcl \
      && rm -rf /var/lib/apt/lists/*

# Pick a SQLite version ≥ 3.43, e.g. 3.48.0 (you can choose latest)
ENV SQLITE_VERSION=${SQLITE_VERSION:-sqlite-autoconf-3500400}

RUN wget https://www.sqlite.org/2025/${SQLITE_VERSION}.tar.gz && \
    tar xzf ${SQLITE_VERSION}.tar.gz && \
    cd ${SQLITE_VERSION} && \
    ./configure --prefix=/usr/local --enable-fts5 && \
    make -j"$(nproc)" && \
    make install

# Clone the repository and checkout the branch
WORKDIR /app

# Enable bytecode compilation
ENV UV_COMPILE_BYTECODE=1
# Copy from the cache instead of linking since it's a mounted volume
ENV UV_LINK_MODE=copy


# Install the project's dependencies using the lockfile and settings
RUN --mount=type=cache,target=/root/.cache/uv \
    --mount=type=bind,source=uv.lock,target=uv.lock \
    --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
    uv sync --frozen --no-install-project --no-dev --no-editable

# Then, add the rest of the project source code and install it
# Installing separately from its dependencies allows optimal layer caching
ADD . /app
RUN --mount=type=cache,target=/root/.cache/uv \
    uv sync --frozen --no-dev --no-editable

FROM python:3.13-slim-bookworm

LABEL io.modelcontextprotocol.server.name="io.github.mafzaal/d365fo-client"


# Copy SQLite installation from uv build stage
COPY --from=uv /usr/local /usr/local

# ensure library loader finds /usr/local/lib for sqlite
RUN echo "/usr/local/lib" > /etc/ld.so.conf.d/local-sqlite.conf && ldconfig

# Create a non-root user
RUN groupadd --gid 1000 mcp_user && \
    useradd --uid 1000 --gid mcp_user --shell /bin/bash --create-home mcp_user

WORKDIR /app

# Copy the virtual environment from uv build stage
COPY --from=uv /app/.venv /app/.venv

# Change ownership of the virtual environment and app to mcp_user
# RUN chown -R mcp_user:mcp_user /app /app/.venv 

# Place executables in the environment at the front of the path
ENV PATH="/app/.venv/bin:$PATH"

# Switch to non-root user
USER mcp_user

# Use our entrypoint script to handle CMD execution with proper validation
CMD ["d365fo-fastmcp-server"]