Erich Blume
08c698e833
## Summary - Replace legacy Dockerfile with native Dagger `container.py` build - Two-stage pipeline: Elixir+Node builder, Debian slim runtime - Uses shared helpers (`clone_from_forge`, `oci_labels`) - Delete old Dockerfile (pipeline auto-discovers container.py) - Update build-container-image docs and mark service reviewed ## Test plan - [x] `dagger call build --src=. --container-name=teslamate` succeeds locally - [ ] CI container build passes - [ ] Deploy from branch and verify teslamate starts cleanly 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #333
104 lines
3.6 KiB
Python
104 lines
3.6 KiB
Python
"""TeslaMate — Tesla data logger.
|
|
|
|
Two-stage build: Elixir+Node (builder), Debian slim (runtime).
|
|
Source cloned from forge mirror.
|
|
"""
|
|
|
|
import dagger
|
|
from dagger import dag
|
|
|
|
from blumeops.containers import clone_from_forge, oci_labels
|
|
|
|
VERSION = "v3.0.0"
|
|
|
|
|
|
async def build(src: dagger.Directory) -> dagger.Container:
|
|
source = clone_from_forge("teslamate", VERSION)
|
|
|
|
# Stage 1: Build Elixir release with Node.js assets
|
|
builder = (
|
|
dag.container()
|
|
.from_("elixir:1.19.5-otp-26")
|
|
.with_exec(
|
|
[
|
|
"bash",
|
|
"-c",
|
|
"apt-get update"
|
|
" && apt-get install -y ca-certificates curl gnupg git zstd brotli"
|
|
" && mkdir -p /etc/apt/keyrings"
|
|
" && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key"
|
|
" | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg"
|
|
' && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg]'
|
|
' https://deb.nodesource.com/node_22.x nodistro main"'
|
|
" > /etc/apt/sources.list.d/nodesource.list"
|
|
" && apt-get update"
|
|
" && apt-get install -y nodejs"
|
|
" && apt-get clean"
|
|
" && rm -rf /var/lib/apt/lists/*",
|
|
]
|
|
)
|
|
.with_exec(["mix", "local.rebar", "--force"])
|
|
.with_exec(["mix", "local.hex", "--force"])
|
|
.with_directory("/opt/app", source)
|
|
.with_workdir("/opt/app")
|
|
.with_env_variable("MIX_ENV", "prod")
|
|
.with_exec(["mix", "deps.get", "--only", "prod"])
|
|
.with_exec(["mix", "deps.compile"])
|
|
.with_exec(
|
|
[
|
|
"npm",
|
|
"ci",
|
|
"--prefix",
|
|
"./assets",
|
|
"--progress=false",
|
|
"--no-audit",
|
|
"--loglevel=error",
|
|
]
|
|
)
|
|
.with_exec(["mix", "assets.deploy"])
|
|
.with_exec(["mix", "compile"])
|
|
.with_exec(
|
|
["bash", "-c", "SKIP_LOCALE_DOWNLOAD=true mix release --path /opt/built"]
|
|
)
|
|
)
|
|
|
|
# Stage 2: Debian slim runtime
|
|
entrypoint = src.file("containers/teslamate/entrypoint.sh")
|
|
|
|
runtime = (
|
|
dag.container()
|
|
.from_("debian:trixie-slim")
|
|
.with_exec(
|
|
[
|
|
"bash",
|
|
"-c",
|
|
"apt-get update && apt-get install -y --no-install-recommends"
|
|
" libodbc2 libsctp1 libssl3t64 libstdc++6"
|
|
" netcat-openbsd tini tzdata"
|
|
" && apt-get clean"
|
|
" && rm -rf /var/lib/apt/lists/*"
|
|
" && groupadd --gid 10001 --system nonroot"
|
|
" && useradd --uid 10000 --system --gid nonroot"
|
|
" --home-dir /home/nonroot --shell /sbin/nologin nonroot",
|
|
]
|
|
)
|
|
)
|
|
runtime = oci_labels(
|
|
runtime,
|
|
title="TeslaMate",
|
|
description="Tesla data logger and visualization",
|
|
version=VERSION,
|
|
)
|
|
return (
|
|
runtime.with_env_variable("LANG", "C.UTF-8")
|
|
.with_env_variable("SRTM_CACHE", "/opt/app/.srtm_cache")
|
|
.with_env_variable("HOME", "/opt/app")
|
|
.with_workdir("/opt/app")
|
|
.with_directory("/opt/app", builder.directory("/opt/built"), owner="nonroot")
|
|
.with_exec(["mkdir", "-p", "/opt/app/.srtm_cache"])
|
|
.with_file("/entrypoint.sh", entrypoint, permissions=0o555, owner="nonroot")
|
|
.with_user("nonroot")
|
|
.with_exposed_port(4000)
|
|
.with_entrypoint(["tini", "--", "/bin/dash", "/entrypoint.sh"])
|
|
.with_default_args(args=["bin/teslamate", "start"])
|
|
)
|