Minimize docker image for the web app.

[abecerra]

The idea: running the python-dev container for development and the python one for production

Running on https://bca-dev.hpc.crg.es/

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[nuno-agostinho]

Hi Andrés, thanks for the PR. The image is not being built in the GitHub Actions, do you know why?

• Django tests
• Publish Docker image in GitHub Actions

[github-actions]

Super-linter summary

Language	Validation result
BASH_EXEC	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
SHELL_SHFMT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[github-actions]

Super-linter summary

Language	Validation result
BASH_EXEC	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
SHELL_SHFMT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[nuno-agostinho]

Could you please cleanup this file for readability? For instance:

• Use newlines to separate different concepts.
• Each indentation should be of 4 spaces.
• Consecutive spaces should be one space only.
• Remove the first comment (# checkov:skip=CKV_DOCKER_3) that should no longer be needed (hopefully).

[nuno-agostinho]

This command is never run, so the static folder won't be populated with the latest files for production use by Django. Also, the app should still be served at the end of staging.

Suggested change

	CMD ["python", "manage.py", "collectstatic", "--noinput"]
	RUN python manage.py collectstatic --noinput
	CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]

That said, I don't think this approach will work. The static directory will be mounted and override anything built into the image. It makes more sense to move the bun and collecstatic commands to entrypoint.sh, as before. This also avoids bloating the image with the big dataset/species static assets.

We should test this thoroughly before trying in production.

[nuno-agostinho]

This command should only be used in staging. Since this image is specific for production, the last command should use gunicorn:

Suggested change

	CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
	CMD ["gunicorn", "config.wsgi", "--bind", "0.0.0.0:8000"]

[github-actions]

Super-linter summary

Language	Validation result
BASH_EXEC	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
SHELL_SHFMT	Pass ✅
SPELL_CODESPELL	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter