Containerfile

# Build Image
# Uses python:3.13-slim because no native dependencies are needed for meshview itself
# (everything is available as a wheel)

FROM docker.io/python:3.13-slim AS meshview-build
RUN apt-get update && \
    apt-get install -y --no-install-recommends curl patch && \
    rm -rf /var/lib/apt/lists/*

# Add a non-root user/group
ARG APP_USER=app
RUN useradd -m -u 10001 -s /bin/bash ${APP_USER}

# Install uv and put it on PATH system-wide
RUN curl -LsSf https://astral.sh/uv/install.sh | sh \
 && install -m 0755 /root/.local/bin/uv /usr/local/bin/uv

WORKDIR /app
RUN chown -R ${APP_USER}:${APP_USER} /app

# Copy deps first for caching
COPY --chown=${APP_USER}:${APP_USER} pyproject.toml uv.lock* requirements*.txt ./

# Optional: wheels-only to avoid slow source builds
ENV UV_NO_BUILD=1
RUN uv venv /opt/venv
# RUN uv sync --frozen
ENV VIRTUAL_ENV=/opt/venv
ENV PATH="$VIRTUAL_ENV/bin:$PATH"

RUN uv pip install --no-cache-dir --upgrade pip \
 && if [ -f requirements.txt ]; then uv pip install --only-binary=:all: -r requirements.txt; fi

# Copy app code
COPY --chown=${APP_USER}:${APP_USER} . .

# Patch config
COPY --chown=${APP_USER}:${APP_USER} container/config.ini /app/sample.config.ini

# Clean
RUN rm -rf /app/.git* && \
  rm -rf /app/.pre-commit-config.yaml && \
  rm -rf /app/*.md && \
  rm -rf /app/COPYING && \
  rm -rf /app/Containerfile && \
  rm -rf /app/Dockerfile && \
  rm -rf /app/container && \
  rm -rf /app/docker && \
  rm -rf /app/docs && \
  rm -rf /app/pyproject.toml && \
  rm -rf /app/requirements.txt && \
  rm -rf /app/screenshots

# Prepare /app and /opt to copy
RUN mkdir -p /meshview && \
  mv /app /opt /meshview

# Use a clean container for install
FROM docker.io/python:3.13-slim
ARG APP_USER=app
COPY --from=meshview-build /meshview /
RUN apt-get update && \
  apt-get install -y --no-install-recommends graphviz && \
  rm -rf /var/lib/apt/lists/* && \
  useradd -m -u 10001 -s /bin/bash ${APP_USER} && \
  mkdir -p /etc/meshview /var/lib/meshview /var/log/meshview && \
  mv /app/sample.config.ini /etc/meshview/config.ini && \
  chown -R ${APP_USER}:${APP_USER} /var/lib/meshview /var/log/meshview

# Drop privileges
USER ${APP_USER}

WORKDIR /app

ENTRYPOINT [ "/opt/venv/bin/python", "mvrun.py"]
CMD ["--pid_dir", "/tmp", "--py_exec", "/opt/venv/bin/python", "--config", "/etc/meshview/config.ini" ]

EXPOSE 8081
VOLUME [ "/etc/meshview", "/var/lib/meshview", "/var/log/meshview" ]