feat: DEV-2750: Add ubi-based docker image (#2610)

Author: farioas

.dockerignore

@@ -10,3 +10,5 @@
 !label_studio/**
 !setup.py
 !README.md
+!licenses/**
+!LICENSE

.github/workflows/cicd_pipeline.yml

@@ -52,7 +52,7 @@ jobs:
             docker:
               - 'label_studio/**'
               - 'deploy/**'
-              - 'Dockerfile'
+              - 'Dockerfile**'
               - 'setup.py'
 
   pr_labeler:

.github/workflows/docker-build.yml

@@ -12,6 +12,7 @@ env:
   IMAGE_NAME: heartexlabs/label-studio
   RELEASE_TAG: 'latest'
   DEVELOP_TAG: 'develop'
+  UBI_TAG: 'ubi_develop'
 
 jobs:
   docker_build_and_push:
@@ -47,15 +48,29 @@ jobs:
           cat $(pwd)/label_studio/core/version_.py
 
       - name: Download feature flags
+        env:
+          LAUNCHDARKLY_COMMUNITY_SDK_KEY: ${{ secrets.LAUNCHDARKLY_COMMUNITY_SDK_KEY }}
         run: |
-          curl -H "Authorization: ${{ secrets.LAUNCHDARKLY_COMMUNITY_SDK_KEY }}" https://app.launchdarkly.com/sdk/latest-all > label_studio/feature_flags.json
+          curl -H "Authorization: $LAUNCHDARKLY_COMMUNITY_SDK_KEY" https://app.launchdarkly.com/sdk/latest-all > label_studio/feature_flags.json
 
-      - name: Build and push
+      - name: Build and push ubuntu
         uses: docker/[email protected]
-        id: docker_build_and_push
+        id: docker_build_and_push_ubuntu
         with:
           context: .
+          file: Dockerfile
           push: true
           tags: ${{ env.IMAGE_NAME }}:${{ env.DEVELOP_TAG }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
+
+      - name: Build and push ubi
+        uses: docker/[email protected]
+        id: docker_build_and_push_ubi
+        with:
+          context: .
+          file: Dockerfile.redhat
+          push: true
+          tags: ${{ env.IMAGE_NAME }}:${{ env.UBI_TAG }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/upload_to_pypi.yml

@@ -59,8 +59,10 @@ jobs:
           python label_studio/manage.py collectstatic
 
       - name: Download feature flags
+        env:
+          LAUNCHDARKLY_COMMUNITY_SDK_KEY: ${{ secrets.LAUNCHDARKLY_COMMUNITY_SDK_KEY }}
         run: |
-          curl -H "Authorization: ${{ secrets.LAUNCHDARKLY_COMMUNITY_SDK_KEY }}" https://app.launchdarkly.com/sdk/latest-all >label_studio/feature_flags.json
+          curl -H "Authorization: $LAUNCHDARKLY_COMMUNITY_SDK_KEY" https://app.launchdarkly.com/sdk/latest-all >label_studio/feature_flags.json
 
       - name: Package
         run: python setup.py sdist bdist_wheel

Dockerfile

@@ -13,7 +13,6 @@ RUN --mount=type=cache,target=$NPM_CACHE_LOCATION \
     npm ci \
  && npm run build:production
 
-
 FROM ubuntu:20.04
 
 ENV DEBIAN_FRONTEND=noninteractive \

Dockerfile.redhat

@@ -0,0 +1,58 @@
+# syntax=docker/dockerfile:1.3
+FROM registry.access.redhat.com/ubi8/nodejs-14-minimal AS frontend-builder
+
+ENV NPM_CACHE_LOCATION=$HOME/.npm \
+    PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+
+WORKDIR /label-studio/label_studio/frontend
+
+COPY --chown=1001:0 label_studio/frontend .
+COPY --chown=1001:0 label_studio/__init__.py /label-studio/label_studio/__init__.py
+
+RUN --mount=type=cache,target=$NPM_CACHE_LOCATION,uid=1001,gid=0 \
+    npm ci \
+ && npm run build:production
+
+FROM registry.access.redhat.com/ubi8/python-39
+
+ENV LS_DIR=/label-studio \
+    PIP_CACHE_DIR=$HOME/.cache \
+    DJANGO_SETTINGS_MODULE=core.settings.label_studio \
+    LABEL_STUDIO_BASE_DATA_DIR=/label-studio/data
+
+WORKDIR $LS_DIR
+
+# Copy and install middleware dependencies
+COPY --chown=1001:0 deploy/requirements-mw.txt .
+RUN --mount=type=cache,target=$PIP_CACHE_DIR,uid=1001,gid=0 \
+    pip3 install -r requirements-mw.txt
+
+# Copy and install requirements.txt first for caching
+COPY --chown=1001:0 deploy/requirements.txt .
+RUN --mount=type=cache,target=$PIP_CACHE_DIR,uid=1001,gid=0 \
+    pip3 install -r requirements.txt
+
+COPY --chown=1001:0 . .
+RUN --mount=type=cache,target=$PIP_CACHE_DIR,uid=1001,gid=0 \
+    pip3 install -e .
+
+RUN rm -rf ./label_studio/frontend
+COPY --chown=1001:0 --from=frontend-builder /label-studio/label_studio/frontend/dist ./label_studio/frontend/dist
+
+RUN python3 label_studio/manage.py collectstatic --no-input
+
+EXPOSE 8080
+
+LABEL name="LabelStudio" \
+  maintainer="[email protected]" \
+  vendor="Heartex" \
+  version="1.5.0dev" \
+  release="1" \
+  summary="LabelStudio" \
+  description="Label Studio is an open source data labeling tool."
+
+COPY --chown=1001:0 licenses/ /licenses
+RUN cp $LS_DIR/LICENSE /licenses
+
+ENTRYPOINT ["./deploy/docker-entrypoint.sh"]
+CMD ["label-studio"]

licenses/django_license.txt

@@ -0,0 +1,27 @@
+Copyright (c) Django Software Foundation and individual contributors.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+    1. Redistributions of source code must retain the above copyright notice,
+       this list of conditions and the following disclaimer.
+
+    2. Redistributions in binary form must reproduce the above copyright
+       notice, this list of conditions and the following disclaimer in the
+       documentation and/or other materials provided with the distribution.
+
+    3. Neither the name of Django nor the names of its contributors may be used
+       to endorse or promote products derived from this software without
+       specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.