chore(dockerfile): use uid gid

Author: lijianguo

rootfs/Dockerfile

@@ -1,31 +1,30 @@
 FROM docker.io/drycc/base:bullseye
 
-ARG DRYCC_UID=1001
-ARG DRYCC_GID=1001
-ARG DRYCC_HOME_DIR=/workspace
+ENV DRYCC_UID=1001 \
+  DRYCC_GID=1001 \
+  DRYCC_HOME_DIR=/workspace \
+  PYTHON_VERSION="3.10.2" \
+  HELM_VERSION="3.8.0"
 
 RUN groupadd drycc --gid ${DRYCC_GID} \
   && useradd drycc -u ${DRYCC_UID} -g ${DRYCC_GID} -s /bin/bash -m -d ${DRYCC_HOME_DIR}
 
-ENV PYTHON_VERSION="3.10.2" \
-  HELM_VERSION="3.8.0"
-
 COPY . ${DRYCC_HOME_DIR}
-
 WORKDIR ${DRYCC_HOME_DIR}
+
 RUN buildDeps='musl-dev openssl' \
-  && install-packages $buildDeps \
-  && install-stack python $PYTHON_VERSION \
-  && install-stack helm $HELM_VERSION && . init-stack \
+  && install-packages ${buildDeps} \
+  && install-stack python ${PYTHON_VERSION} \
+  && install-stack helm ${HELM_VERSION} && . init-stack \
   && python3 -m venv ${DRYCC_HOME_DIR}/.venv \
   && source ${DRYCC_HOME_DIR}/.venv/bin/activate \
   && pip3 install --disable-pip-version-check --no-cache-dir -r ${DRYCC_HOME_DIR}/requirements.txt \
-  && chown -R drycc:drycc ${DRYCC_HOME_DIR} \
+  && chown -R ${DRYCC_UID}:${DRYCC_GID} ${DRYCC_HOME_DIR} \
   # set env
   && echo "source ${DRYCC_HOME_DIR}/.venv/bin/activate" >> /opt/drycc/python/profile.d/python.sh \
   # cleanup
   && scanelp ${DRYCC_HOME_DIR}/.venv/lib > runtime.txt \
-  && apt-get purge -y --auto-remove $buildDeps \
+  && apt-get purge -y --auto-remove ${buildDeps} \
   && install-packages $(< runtime.txt) \
   && apt-get autoremove -y \
   && apt-get clean -y \
@@ -44,7 +43,7 @@ RUN buildDeps='musl-dev openssl' \
         /usr/lib/`echo $(uname -m)`-linux-gnu/gconv/EBC* \
   && mkdir -p /usr/share/man/man{1..8}
 
-USER drycc
+USER ${DRYCC_UID}
 WORKDIR ${DRYCC_HOME_DIR}
 CMD ["bin/boot"]
 EXPOSE 8000

rootfs/Dockerfile.test

@@ -1,33 +1,33 @@
 FROM docker.io/drycc/base:bullseye
 
-ARG DRYCC_UID=1001
-ARG DRYCC_GID=1001
-ARG DRYCC_HOME_DIR=/workspace
+ENV DRYCC_UID=1001 \
+  DRYCC_GID=1001 \
+  DRYCC_HOME_DIR=/workspace \
+  PYTHON_VERSION="3.10.2" \
+  HELM_VERSION="3.8.0" \
+  KUBECTL_VERSION="1.23.4"
 
 RUN groupadd drycc --gid ${DRYCC_GID} \
   && useradd drycc -u ${DRYCC_UID} -g ${DRYCC_GID} -s /bin/bash -m -d ${DRYCC_HOME_DIR}
-ENV PYTHON_VERSION="3.10.2" \
-  HELM_VERSION="3.8.0" \
-  KUBECTL_VERSION="1.23.4"
 
 COPY . ${DRYCC_HOME_DIR}
 WORKDIR ${DRYCC_HOME_DIR}
 
 RUN buildDeps='musl-dev openssl'; \
-  install-packages $buildDeps \
-  && install-stack python $PYTHON_VERSION \
-  && install-stack helm $HELM_VERSION \
-  && install-stack kubectl $KUBECTL_VERSION && . init-stack \
+  install-packages ${buildDeps} \
+  && install-stack python ${PYTHON_VERSION} \
+  && install-stack helm ${HELM_VERSION} \
+  && install-stack kubectl ${KUBECTL_VERSION} && . init-stack \
   && python3 -m venv ${DRYCC_HOME_DIR}/.venv \
   && source ${DRYCC_HOME_DIR}/.venv/bin/activate \
   && pip3 install --disable-pip-version-check --no-cache-dir -r ${DRYCC_HOME_DIR}/requirements.txt \
   && pip3 install --disable-pip-version-check --no-cache-dir -r ${DRYCC_HOME_DIR}/dev_requirements.txt \
-  && chown -R drycc:drycc ${DRYCC_HOME_DIR} \
+  && chown -R ${DRYCC_UID}:${DRYCC_GID} ${DRYCC_HOME_DIR} \
   # set env
   && echo "source ${DRYCC_HOME_DIR}/.venv/bin/activate" >> /opt/drycc/python/profile.d/python.sh \
   # cleanup
   && scanelp ${DRYCC_HOME_DIR}/.venv/lib > runtime.txt \
-  && apt-get purge -y --auto-remove $buildDeps \
+  && apt-get purge -y --auto-remove ${buildDeps} \
   && install-packages $(< runtime.txt) \
   && apt-get autoremove -y \
   && apt-get clean -y \
@@ -46,7 +46,7 @@ RUN buildDeps='musl-dev openssl'; \
         /usr/lib/`echo $(uname -m)`-linux-gnu/gconv/EBC* \
   && mkdir -p /usr/share/man/man{1..8}
 
-USER drycc
+USER ${DRYCC_UID}
 WORKDIR ${DRYCC_HOME_DIR}
 CMD ["bin/boot"]
 EXPOSE 8000