build(container): reduce image size (#60)

* reduce container image size
* simplify the docker compose
* fix the github dispatch package to be compatible with github release
webhooks

Signed-off-by: Aubin Lambaré <aubin.lambare@cs-soprasteria.com>

Author: alambare

.github/workflows/package.yml

@@ -6,7 +6,7 @@ on:
     tags: ['v*']
   workflow_dispatch:
   repository_dispatch:
-    types: [eodag_release]
+    types: [release]
 
 env:
   REGISTRY: ghcr.io
@@ -43,7 +43,7 @@ jobs:
           CONTAINER_TAG=${GITHUB_REF##*/}
 
           # Check if this is a release or eodag dispatch
-          if [[ "${GITHUB_REF_TYPE}" == "tag" || ( "${GITHUB_EVENT_NAME}" == "repository_dispatch" && "${GITHUB_EVENT_CLIENT_PAYLOAD_TYPE}" == "eodag_release" ) ]]; then
+          if [[ "${GITHUB_REF_TYPE}" == "tag" || ( "${GITHUB_EVENT_NAME}" == "repository_dispatch" && "${GITHUB_EVENT_CLIENT_PAYLOAD_TYPE}" == "release" ) ]]; then
               CONTAINER_TAG="${APP_VERSION}-eodag-${EODAG_VERSION}"
           fi
 

Dockerfile

@@ -1,23 +1,17 @@
 ARG PYTHON_VERSION=3.12
 
-FROM python:${PYTHON_VERSION}-slim AS base
+FROM python:${PYTHON_VERSION}-slim
 
-# Any python libraries that require system libraries to be installed will likely
-# need the following packages in order to build
-RUN apt-get update && \
-    apt-get -y upgrade && \
-    apt-get install -y build-essential git && \
-    apt-get clean && \
-    rm -rf /var/lib/apt/lists/*
+WORKDIR /app
 
-ENV CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
+COPY . /app
 
-FROM base AS builder
+RUN python -m pip install  --no-cache-dir .[server,telemetry]
 
-WORKDIR /app
+RUN adduser --disabled-password --gecos '' appuser
 
-COPY . /app
+USER appuser
 
-RUN python -m pip install .[server,telemetry]
+EXPOSE 8080
 
-ENTRYPOINT ["/bin/bash", "-c", "python stac_fastapi/eodag/app.py"]
+CMD ["uvicorn", "stac_fastapi.eodag.app:app", "--host", "0.0.0.0", "--port", "8080"]

config/otelcol_config.yml

@@ -24,13 +24,12 @@ processors:
   batch:
 
 exporters:
-  debug:
-    verbosity: detailed
-  # Data sources: metrics
+  # metrics
   prometheus:
     endpoint: 0.0.0.0:8000
     namespace: eodag-otelcol-exporter
 
+  # traces
   otlphttp:
     endpoint: "http://jaeger:4318"
     tls:
@@ -43,12 +42,11 @@ service:
     traces:
       receivers: [otlp]
       processors: [batch]
-      exporters: [debug,otlphttp]
+      exporters: [otlphttp]
 
     metrics:
-#      receivers: [otlp, prometheus]
       receivers: [otlp]
       processors: [batch]
-      exporters: [debug,prometheus]
+      exporters: [prometheus]
 
   extensions: [health_check, pprof, zpages]

docker-compose-otel.yaml

@@ -1,28 +1,25 @@
-networks:
-  stacapi-eodag-network:
-    driver: bridge
-
 services:
   stac_fastapi_eodag_server:
     image: stac-fastapi-eodag:latest
     container_name: eodag_server
     build: .
     ports:
-      - "8080:8000"
-    networks:
-      - stacapi-eodag-network
+      - "8080:8080"
     depends_on:
       - otel-collector
     environment:
       OTEL_EXPORTER_OTLP_ENDPOINT: "http://otel-collector:4318/"
   otel-collector:
-    image: otel/opentelemetry-collector-contrib:0.90.1
+    image: otel/opentelemetry-collector-contrib:latest
+    command: ["--config=/etc/otelcol-config.yml"]
     container_name: otel_collector
     restart: unless-stopped
     volumes:
-      - ./config/otelcol_config.yml:/etc/otelcol-contrib/config.yaml
-    networks:
-      - stacapi-eodag-network
+      - ./config/otelcol_config.yml:/etc/otelcol-config.yml
     ports:
       - "4318:4318"
       - "8000:8000"
+  jaeger:
+    image: jaegertracing/all-in-one:latest
+    ports:
+      - "16686:16686" # Jaeger UI