semem/Dockerfile at main · danja/semem · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
# Multi-stage Dockerfile for Semem
# Semantic Memory for Intelligent Agents

# Stage 1: Builder - Install dependencies and build assets
FROM node:22-slim AS builder

# Install build dependencies for native modules
RUN apt-get update && apt-get install -y \
    python3 \
    make \
    g++ \
    python3-setuptools \
    git \
    cmake \
    libopenblas-dev \
    libblas-dev \
    liblapack-dev \
    pkg-config \
    && rm -rf /var/lib/apt/lists/*

# Set working directory
WORKDIR /app

# Copy package files first for better layer caching
COPY package*.json ./

# Install all dependencies (including devDependencies for building)
RUN npm install --include=dev

# Copy source code
COPY . .

# Build frontend assets (workbench and any other frontend builds)
RUN npm run build

# Remove dev dependencies to reduce size
RUN npm prune --production

# Stage 2: Runtime - Create lean production image
FROM node:22-slim AS runtime

# Install system dependencies needed for the application
RUN apt-get update && apt-get install -y \
    bash \
    curl \
    tini \
    vim-common \
    netcat-traditional \
    && rm -rf /var/lib/apt/lists/* \
    && groupadd -g 1001 semem \
    && useradd -u 1001 -g semem -s /bin/bash semem

# Set working directory
WORKDIR /app

# Copy package files and node_modules from builder
COPY --from=builder --chown=semem:semem /app/package*.json ./
COPY --from=builder --chown=semem:semem /app/node_modules ./node_modules

# Copy application source code
COPY --from=builder --chown=semem:semem /app/src ./src
COPY --from=builder --chown=semem:semem /app/bin ./bin
COPY --from=builder --chown=semem:semem /app/index.js ./
COPY --from=builder --chown=semem:semem /app/start.sh ./
COPY --from=builder --chown=semem:semem /app/stop.sh ./

# Copy configuration and scripts
COPY --from=builder --chown=semem:semem /app/config ./config
COPY --from=builder --chown=semem:semem /app/scripts ./scripts
COPY --from=builder --chown=semem:semem /app/prompts ./prompts
COPY --from=builder --chown=semem:semem /app/sparql ./sparql

# Copy built assets (if any)
COPY --from=builder --chown=semem:semem /app/dist ./dist

# Create necessary directories with proper permissions
RUN mkdir -p /app/logs /app/data /app/tmp \
    && chown -R semem:semem /app

# Copy and set up entrypoint script
COPY scripts/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
RUN chmod +x /usr/local/bin/docker-entrypoint.sh \
    && chmod +x /app/start.sh \
    && chmod +x /app/stop.sh

# Expose ports for all services
EXPOSE 4100 4101 4102

# Set environment variables
ENV NODE_ENV=production \
    NODE_OPTIONS="--max-old-space-size=2048" \
    PORT=4100 \
    SEMEM_CONFIG_PATH=/app/config/config.json

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
    CMD curl -f http://localhost:4100/health || exit 1

# Switch to non-root user
USER semem

# Use tini as init system for proper signal handling
ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/docker-entrypoint.sh"]

# Default command
CMD ["npm", "start"]