test.Dockerfile

FROM registry.access.redhat.com/ubi9/ubi:9.4

LABEL summary="OSIDB testrunner" \
      maintainer="Product Security DevOps <prodsec-dev@redhat.com>"

ARG PYPI_MIRROR="https://pypi.python.org/simple"
ENV PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=off \
    PIP_INDEX_URL=$PYPI_MIRROR \
    REQUESTS_CA_BUNDLE="/etc/pki/tls/certs/ca-bundle.crt"

WORKDIR /opt/app-root/src/

# Download internal root CA cert and the IPA CA cert
ARG RH_CERT_URL=""
COPY ./scripts /opt/app-root/src/scripts
RUN ./scripts/install-certs.sh $RH_CERT_URL

# install dependencies and security updates
RUN dnf --nodocs --setopt install_weak_deps=false -y install \
        cargo \
        gcc \
        git \
        krb5-devel \
        krb5-workstation \
        libffi-devel \
        libpq-devel \
        make \
        openldap-devel \
        openssl-devel \
        python3-devel \
        python3-pip \
        python3-wheel \
        redhat-rpm-config \
        which \
    && dnf --nodocs --setopt install_weak_deps=false -y upgrade --security \
    && dnf clean all

# Before copying the entire source, copy just devel-requirements.txt.
# This makes podman cache this (lengthy) step as long as devel-requirements.txt stays unchanged.
# Without this, any change in src/ would make pip install run again.
COPY ./devel-requirements.txt /opt/app-root/src/devel-requirements.txt
RUN pip3 install --no-deps -r /opt/app-root/src/devel-requirements.txt && \
    rm -f /opt/app-root/src/devel-requirements.txt
COPY . /opt/app-root/src