ROMA/Dockerfile at main · techlibs/ROMA · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
# syntax=docker/dockerfile:1.4
# ROMA-DSPy Application Dockerfile - OPTIMIZED
# Using BuildKit for cache mounts and faster builds
# Multi-stage build with uv for minimal size and maximum speed

# ============================================================================
# Builder stage - Install Python dependencies
# ============================================================================
FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim AS builder

# Install build dependencies in single layer
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
    apt-get update && apt-get install -y --no-install-recommends \
    build-essential \
    git \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy only dependency files first (better layer caching)
COPY pyproject.toml README.md ./
COPY src/roma_dspy/__init__.py src/roma_dspy/

# Install dependencies with uv cache mount (much faster on rebuilds)
# Install all features for production deployment
RUN --mount=type=cache,target=/root/.cache/uv \
    uv pip install --system -e ".[all]"

# Copy rest of source for final install
COPY src/ ./src/
RUN uv pip install --system --no-deps -e .

# ============================================================================
# Final stage - Minimal runtime image
# ============================================================================
FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim

# Install all runtime dependencies in single layer, clean up in same layer
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
    apt-get update && apt-get install -y --no-install-recommends \
    curl \
    git \
    fuse \
    ca-certificates \
    postgresql-client \
    wget \
    nodejs \
    npm \
    libmagic1 \
    && rm -rf /var/lib/apt/lists/* \
    # Download and install goofys
    && wget -q -O /usr/local/bin/goofys https://github.com/kahing/goofys/releases/latest/download/goofys \
    && chmod +x /usr/local/bin/goofys \
    # Enable FUSE for non-root users
    && echo "user_allow_other" >> /etc/fuse.conf \
    # Create user and all directories in one command
    && useradd -m -u 1000 roma \
    && mkdir -p /opt/sentient /app/.checkpoints /app/.cache /app/logs /app/executions /mlflow/artifacts \
    && chown -R roma:roma /opt/sentient /mlflow

WORKDIR /app

# Copy installed packages from builder
COPY --from=builder /usr/local/lib/python3.12/site-packages /usr/local/lib/python3.12/site-packages
COPY --from=builder /usr/local/bin /usr/local/bin

# Copy application code (with proper ownership)
COPY --chown=roma:roma . .

# Final ownership fix
RUN chown -R roma:roma /app

# Switch to non-root user
USER roma

# Set environment variables (combined for fewer layers)
ENV PYTHONPATH=/app/src \
    PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    UV_SYSTEM_PYTHON=1

# Expose API port
EXPOSE 8000

# Optimized health check (less frequent, faster timeout)
HEALTHCHECK --interval=60s --timeout=5s --start-period=40s --retries=2 \
    CMD curl -f http://localhost:8000/health || exit 1

# Default command
CMD ["roma-dspy", "server", "start", "--host", "0.0.0.0", "--port", "8000", "--workers", "4"]