Skip to content

fix(docker,pyproject): update base images and add build dependencies; remove autogenerated requirements.txt #114

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
magneticstain merged 1 commit into from
Aug 31, 2026
Merged

fix(docker,pyproject): update base images and add build dependencies; remove autogenerated requirements.txt #114

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 5 additions & 4 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1

FROM python:3.13-slim@sha256:6771159cd4fa5d9bba1258caf0b82e6b73458c694d178ad97c5e925c2d0e1a91 AS build
FROM ghcr.io/astral-sh/uv:alpine3.23@sha256:7d1ef166503c3c123a51f17d4eeb4dc748c33ebf4ae3bfad54f1163e1c36afcb AS build

WORKDIR /build

Expand All @@ -9,7 +9,8 @@ WORKDIR /build
# However, it can compare the hash against PyPI's hash.
# Since PyPI sends requests over TLS, this should be secure enough for our threat model.
# https://pypi.org/project/pipx/
RUN pip install pipx==1.7.1 --hash=sha256:a575ced25c507c1b1c978269f5684b5b291e81e3cd14eb3cee196a3c5b304732
# RUN pip install pipx==1.7.1 --hash=sha256:a575ced25c507c1b1c978269f5684b5b291e81e3cd14eb3cee196a3c5b304732
RUN uv sync --group build
# https://pipx.pypa.io/latest/how-to/pin-packages.html
RUN pipx install hatch==1.13.0 && pipx pin hatch

Expand All @@ -21,8 +22,8 @@ RUN hatch build

########################

# linux/amd64 arch
FROM python:3.13-alpine@sha256:81362dd1ee15848b118895328e56041149e1521310f238ed5b2cdefe674e6dbf
# Google distroless Python 3.13 Alpine image
FROM gcr.io/distroless/python3-debian13:nonroot-arm64@sha256:92f92e538766c4550670d0a0909068d8f7968286e183157de67d8068cd147dcc

RUN apk update && \
apk add --no-cache libmagic
Expand Down
8 changes: 6 additions & 2 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,6 +62,10 @@ path = "src/plexer_cli/main.py"

[dependency-groups]
dev = [
"moviepy>=2.2.1",
"pytest>=9.0.3",
"moviepy>=2.2.1",
"pytest>=9.0.3",
]
build = [
"pipx>=1.17.1",
"tox-gh>=1.2"
]
10 changes: 0 additions & 10 deletions requirements.txt
View file
Open in desktop

This file was deleted.

180 changes: 179 additions & 1 deletion uv.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading