Dockerfile

FROM ubuntu-debootstrap:vivid
MAINTAINER Olle Vidner <olle.vidner@sof15.se>

RUN apt-get update -y && apt-get install -y \
    python-dev \
    python-pip \
    libpq-dev \
    libldap2-dev \
    libsasl2-dev \
    libncurses5-dev \
    libffi-dev \
    libssl-dev \
    git \
    gettext

RUN pip install virtualenv

# --gecos "" for non-interactive behavior
RUN adduser --disabled-password --gecos "" sof15

RUN virtualenv /home/sof15

# Copies only the requirements file first so that it can be cached by Docker
COPY ./requirements.txt /home/sof15/app/requirements.txt

RUN /home/sof15/bin/pip install -r /home/sof15/app/requirements.txt

# RUN cp /home/sof15/app/_conf/ad.liu.se-enterprise-ca.pem.crt /usr/local/share/ca-certificates/
COPY _conf/ad.liu.se-root-ca.pem.crt /usr/local/share/ca-certificates/
RUN update-ca-certificates

# Now copy the rest of the code
COPY . /home/sof15/app

RUN mkdir -p /home/sof15/app/_build/static/

# Django will be sad if we don't set these envs during build.
ENV BUILD true
RUN /home/sof15/bin/python /home/sof15/app/manage.py collectstatic --noinput
RUN /home/sof15/bin/python /home/sof15/app/manage.py compilemessages
# "Unset" the SECRET_KEY, so we can't accidently start with an unsafe, default key
ENV BUILD false

# Make sure these are always last, we want to have as few ownerships on files as possible
USER sof15
ENV HOME /home/sof15
WORKDIR /home/sof15/app

# Running gunicorn also enters the virtualenv, so we don't have to do that explicitly
CMD ["/home/sof15/bin/newrelic-admin", "run-program", "/home/sof15/bin/gunicorn", "sof15.wsgi", "-c", "/home/sof15/app/_conf/gunicorn.py"]
EXPOSE 8080