mirror of
https://github.com/0xsrb/AASRT.git
synced 2026-04-23 02:16:00 +02:00
swethab
86 lines
2.8 KiB
Docker
86 lines
2.8 KiB
Docker
# =============================================================================
|
|
# AASRT - AI Agent Security Reconnaissance Tool
|
|
# Production Dockerfile with Multi-Stage Build
|
|
# =============================================================================
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Stage 1: Builder - Install dependencies and prepare application
|
|
# -----------------------------------------------------------------------------
|
|
FROM python:3.13-slim AS builder
|
|
|
|
# Set build-time environment variables
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
PIP_NO_CACHE_DIR=1 \
|
|
PIP_DISABLE_PIP_VERSION_CHECK=1
|
|
|
|
WORKDIR /app
|
|
|
|
# Install build dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy requirements first for layer caching
|
|
COPY requirements.txt .
|
|
|
|
# Install Python dependencies to a virtual environment
|
|
RUN python -m venv /opt/venv
|
|
ENV PATH="/opt/venv/bin:$PATH"
|
|
RUN pip install --upgrade pip && \
|
|
pip install -r requirements.txt
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# Stage 2: Runtime - Minimal production image
|
|
# -----------------------------------------------------------------------------
|
|
FROM python:3.13-slim AS runtime
|
|
|
|
# Labels for container identification
|
|
LABEL maintainer="AASRT Team" \
|
|
version="1.0.0" \
|
|
description="AI Agent Security Reconnaissance Tool - Production Image"
|
|
|
|
# Security: Run as non-root user
|
|
RUN groupadd --gid 1000 aasrt && \
|
|
useradd --uid 1000 --gid aasrt --shell /bin/bash --create-home aasrt
|
|
|
|
# Set runtime environment variables
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
PYTHONPATH=/app \
|
|
# Application configuration
|
|
AASRT_ENVIRONMENT=production \
|
|
AASRT_LOG_LEVEL=INFO \
|
|
# Streamlit configuration
|
|
STREAMLIT_SERVER_PORT=8501 \
|
|
STREAMLIT_SERVER_ADDRESS=0.0.0.0 \
|
|
STREAMLIT_SERVER_HEADLESS=true \
|
|
STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy virtual environment from builder
|
|
COPY --from=builder /opt/venv /opt/venv
|
|
ENV PATH="/opt/venv/bin:$PATH"
|
|
|
|
# Copy application code
|
|
COPY --chown=aasrt:aasrt . .
|
|
|
|
# Create necessary directories with correct permissions
|
|
RUN mkdir -p /app/data /app/logs /app/reports && \
|
|
chown -R aasrt:aasrt /app/data /app/logs /app/reports
|
|
|
|
# Switch to non-root user
|
|
USER aasrt
|
|
|
|
# Expose Streamlit port
|
|
EXPOSE 8501
|
|
|
|
# Health check using Python (curl not available in slim image)
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8501/_stcore/health', timeout=5)" || exit 1
|
|
|
|
# Default command: Run Streamlit web interface
|
|
CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]
|
|
|