mirror of
https://github.com/suitenumerique/meet.git
synced 2026-08-06 00:47:47 +00:00
lebaudantoine
fcad79d662
The base image now includes OpenSSL 3.5.5, which resolves CVE-2025-15467. Remove explicit pinning of OpenSSL and its dependencies.
34 lines
627 B
Docker
34 lines
627 B
Docker
FROM python:3.13-slim AS base
|
|
|
|
# Install system dependencies required by LiveKit
|
|
RUN apt-get update && apt-get install -y \
|
|
libglib2.0-0 \
|
|
libgobject-2.0-0 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
FROM base AS builder
|
|
|
|
WORKDIR /builder
|
|
|
|
COPY pyproject.toml .
|
|
|
|
RUN mkdir /install && \
|
|
pip install --prefix=/install .
|
|
|
|
FROM base AS production
|
|
|
|
WORKDIR /app
|
|
|
|
# Remove pip to reduce attack surface in production
|
|
RUN pip uninstall -y pip
|
|
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
# Un-privileged user running the application
|
|
COPY --from=builder /install /usr/local
|
|
|
|
COPY . .
|
|
|
|
CMD ["python", "multi-user-transcriber.py", "start"]
|