gen3-frontend-framework/Dockerfile at develop · AustralianBioCommons/gen3-frontend-framework · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
# docker build -t gen3:fef .
# docker run -p 3000:3000 -it gen3:fef
# Build stage
FROM --platform=$BUILDPLATFORM node:24.18.1-alpine3.23 AS builder

ARG TARGETPLATFORM
ARG BUILDPLATFORM
ARG TARGETARCH
WORKDIR /gen3

# Copy root manifests first to maximize npm install cache hits
COPY package.json package-lock.json lerna.json ./

# Install ALL dependencies once (including dev deps for build)
RUN npm config set fetch-retries 5 && \
    npm config set fetch-retry-mintimeout 20000 && \
    npm config set fetch-retry-maxtimeout 120000 && \
    npm ci && \
    npm cache clean --force

# Python, bash, and curl for the JupyterLite build.
# No real micromamba binary needed — see stub below.
RUN apk add --no-cache python3 py3-pip bash curl bzip2 uv git coreutils

# Stub that satisfies prepare_wasm.js without the glibc-linked micromamba binary.
COPY docker/micromamba-stub.py /usr/local/bin/micromamba
RUN chmod +x /usr/local/bin/micromamba

# Copy only package manifests (not source) from each workspace so that
# npm ci is only re-run when dependencies change, not on source changes
COPY packages/core/package.json        packages/core/
COPY packages/frontend/package.json    packages/frontend/
COPY packages/tools/package.json       packages/tools/
COPY packages/sampleCommons/package.json packages/sampleCommons/
COPY packages/workspaces/package.json  packages/workspaces/

# Install dependencies using the locked versions from package-lock.json.
# lerna is in devDependencies so no global install is needed.
# Cache mount avoids re-downloading packages on repeated builds.
RUN --mount=type=cache,target=/root/.npm \
    npm ci --include=optional

# Copy source after install so the install layer stays cached on source-only changes
COPY packages ./packages
# build all packages first so that the jupyterlite build has the files it needs
RUN npm run build:pkg

# Download cockle WASM packages from emscripten-forge so prepare_wasm.js reuses
# the existing env instead of running micromamba create. prepare_wasm.js is
# invoked with cwd=lite_dir, so the env must live inside the remote tier's
# `--lite-dir` (dist/jupyterlite-builds/remote-private) — not sampleCommons —
# otherwise its relative `./cockle_wasm_env` lookup misses. Only the remote
# tier is downloaded here; the free tier is not used in this image.
RUN WASM_ENV=/gen3/packages/workspaces/dist/jupyterlite-builds/remote-private/cockle_wasm_env && \
    mkdir -p "$WASM_ENV" && \
    for URL in \
      "https://repo.prefix.dev/emscripten-forge-4x/emscripten-wasm32/cockle_fs-0.3.0-h8b79025_1.tar.bz2" \
      "https://repo.prefix.dev/emscripten-forge-4x/emscripten-wasm32/coreutils-9.10-h072c4ef_2.tar.bz2" \
      "https://repo.prefix.dev/emscripten-forge-4x/emscripten-wasm32/grep-3.12-h8b79025_0.tar.bz2" \
      "https://repo.prefix.dev/emscripten-forge-4x/emscripten-wasm32/less-693-hf259948_0.tar.bz2" \
      "https://repo.prefix.dev/emscripten-forge-4x/emscripten-wasm32/sed-4.9-h072c4ef_0.tar.bz2" \
    ; do \
      curl -fsSL "$URL" | tar -xj -C "$WASM_ENV"; \
    done

# Build JupyterLite static assets
RUN npm run build:jupyterlite

# Build only sampleCommons and its dependencies — storybook is not needed
RUN NODE_OPTIONS="--max-old-space-size=4096" \
    ./node_modules/.bin/lerna run build \
    --scope=@gen3/samplecommons \
    --include-dependencies

# ─────────────────────────────────────────────
# Production stage
FROM node:24.18.1-alpine3.23 AS runner

WORKDIR /gen3

RUN apk add --no-cache curl

# Create non-root user
RUN addgroup --system --gid 1001 nextjs \
    && adduser --system --uid 1001 nextjs

ENV NODE_ENV=production \
    PORT=3000

# Copy only what is required to run the built app
# If your Next.js standalone output already contains node_modules,
# you usually don't need a separate node_modules copy.
COPY --from=builder --chown=nextjs:nextjs /gen3/packages/sampleCommons/.next/standalone ./
COPY --from=builder --chown=nextjs:nextjs /gen3/packages/sampleCommons/.next/static \
  ./packages/sampleCommons/.next/static
COPY --from=builder --chown=nextjs:nextjs /gen3/packages/sampleCommons/config ./packages/sampleCommons/config
COPY --from=builder --chown=nextjs:nextjs /gen3/packages/sampleCommons/public ./packages/sampleCommons/public
COPY --from=builder --chown=nextjs:nextjs /gen3/packages/sampleCommons/jupyter-workspaces \
  ./packages/sampleCommons/jupyter-workspaces

# Copy runtime script directly from build context (no need to stage through builder)
COPY --chown=nextjs:nextjs start.sh ./start.sh

# Prepare mount points for config and public assets
#VOLUME /gen3/config
#VOLUME /gen3/public

# Point app config/public to external volumes
RUN ln -s ./packages/sampleCommons/config  /gen3/config \
    && ln -s ./packages/sampleCommons/public /gen3/public \
    && ln -s ./packages/sampleCommons/jupyter-workspaces /gen3/jupyter-workspaces

USER nextjs:nextjs

CMD ["sh", "./start.sh"]