···

       
1
       
 
       
# syntax=docker/dockerfile:1

     

       
2
       
-
       
FROM ghcr.io/hadolint/hadolint:latest-alpine AS hadolint-binary

     

       
3
       
-
       


     

       
4
       
 
       
# Since we're building against edge at risk, it is important to note

     

       
5
       
 
       
# that anything might go wrong.

     

       
6
       
 
       
FROM alpine:edge AS buildkit

     

       
7
       
 
       


     

       
8
       
 
       
# Since hadolint isn't in the package repos for Alpine yet, we'll copying from the offical

     

       
9
       
 
       
# Docker image instead.

     

       
10
       
-
       
COPY --from=hadolint-binary /bin/hadolint /usr/bin/hadolint

     

       
11
       
 
       


     

       
12
       
 
       
ENV PACKAGES=/usr/local/lib/python3.11/site-packages

     

       
13
       
 
       
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/root/.local/bin

     

       
14
       
 
       
ENV PYTHONDONTWRITEBYTECODE=1

     

       
15
       
-
       
COPY --from=hadolint-binary /bin/hadolint /usr/bin/hadolint

     

       
16
       
 
       


     

       
17
       
 
       
# https://squidfunk.github.io/mkdocs-material/setup/setting-up-social-cards/#linux but for Alpine

     

       
0
       
 
       

     

       
18
       
 
       
# hadolint ignore=DL3018,DL3013

     

       
19
       
 
       
RUN apk add --no-cache \

     

       
20
       
 
       
     cairo-dev \

     
···

       
37
       
 
       
     npm \

     

       
38
       
 
       
     yarn \

     

       
39
       
 
       
     git \

     

       
0
       
 
       

     

       
0
       
 
       

     

       
40
       
 
       
     git-fast-import \

     

       
41
       
 
       
     openssh \

     

       
42
       
 
       
     gnupg \

     

       
43
       
 
       
     curl \

     

       
44
       
 
       
  && curl -Ls --tlsv1.2 --proto "=https" --retry 3 https://cli.doppler.com/install.sh \

     

       
45
       
 
       
    | sh

     

       
46
       
-
       
# The "--break-system-packages" is added so I don't need to do requirements.txt workaround,

     

       
47
       
-
       
# although I also consider using pipx if we wanted to.

     

       
48
       
-
       
# See also https://www.jeffgeerling.com/blog/2023/how-solve-error-externally-managed-environment-when-installing-pip3

     

       
49
       
 
       
RUN rm -rv /usr/lib/python3*/EXTERNALLY-MANAGED \

     

       
50
       
 
       
  && pip install --no-cache \

     

       
51
       
 
       
      mkdocs-material \

     

···

       
1
       
 
       
# syntax=docker/dockerfile:1

     

       
0
       
 
       

     

       
0
       
 
       

     

       
2
       
 
       
# Since we're building against edge at risk, it is important to note

     

       
3
       
 
       
# that anything might go wrong.

     

       
4
       
 
       
FROM alpine:edge AS buildkit

     

       
5
       
 
       


     

       
6
       
 
       
# Since hadolint isn't in the package repos for Alpine yet, we'll copying from the offical

     

       
7
       
 
       
# Docker image instead.

     

       
8
       
+
       
COPY --from=ghcr.io/hadolint/hadolint:latest-alpine /bin/hadolint /usr/bin/hadolint

     

       
9
       
 
       


     

       
10
       
 
       
ENV PACKAGES=/usr/local/lib/python3.11/site-packages

     

       
11
       
 
       
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/root/.local/bin

     

       
12
       
 
       
ENV PYTHONDONTWRITEBYTECODE=1

     

       
0
       
 
       

     

       
13
       
 
       


     

       
14
       
 
       
# https://squidfunk.github.io/mkdocs-material/setup/setting-up-social-cards/#linux but for Alpine

     

       
15
       
+
       
# Also installs Doppler CLI for accessing secrets securely within CI

     

       
16
       
 
       
# hadolint ignore=DL3018,DL3013

     

       
17
       
 
       
RUN apk add --no-cache \

     

       
18
       
 
       
     cairo-dev \

     
···

       
35
       
 
       
     npm \

     

       
36
       
 
       
     yarn \

     

       
37
       
 
       
     git \

     

       
38
       
+
       
     git-email \

     

       
39
       
+
       
     git-lfs \

     

       
40
       
 
       
     git-fast-import \

     

       
41
       
 
       
     openssh \

     

       
42
       
 
       
     gnupg \

     

       
43
       
 
       
     curl \

     

       
44
       
 
       
  && curl -Ls --tlsv1.2 --proto "=https" --retry 3 https://cli.doppler.com/install.sh \

     

       
45
       
 
       
    | sh

     

       
46
       
+
       


     

       
47
       
+
       
# See https://www.jeffgeerling.com/blog/2023/how-solve-error-externally-managed-environment-when-installing-pip3

     

       
48
       
+
       
# for context behind removing the EXTERNALLY-MANAGED file

     

       
49
       
 
       
RUN rm -rv /usr/lib/python3*/EXTERNALLY-MANAGED \

     

       
50
       
 
       
  && pip install --no-cache \

     

       
51
       
 
       
      mkdocs-material \