ea4all-docker-demo-secrets

Dockerfile

@@ -0,0 +1,33 @@
+FROM python:3.11.3
+
+WORKDIR /code
+
+COPY ./requirements.txt /code/requirements.txt
+
+RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
+
+# Get secret EXAMPLE and output it to /test at buildtime
+RUN --mount=type=secret,id=EXAMPLE,mode=0444,required=true \
+   cat /run/secrets/EXAMPLE > /test
+
+# Get secret SECRET_EXAMPLE and clone it as repo at buildtime
+RUN --mount=type=secret,id=SECRET_EXAMPLE,mode=0444,required=true \
+  git clone $(cat /run/secrets/SECRET_EXAMPLE)
+
+# Set up a new user named "user" with user ID 1000
+RUN useradd -m -u 1000 user
+
+# Switch to the "user" user
+USER user
+
+# Set home to the user's home directory
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
+# Set the working directory to the user's home directory
+WORKDIR $HOME/app
+
+# Copy the current directory contents into the container at $HOME/app setting the owner to the user
+COPY --chown=user . $HOME/app
+
+CMD ["python", "main.py"]

main.py

@@ -0,0 +1,14 @@
+import random
+import gradio as gr
+import os
+
+
+def random_response(message, history):
+    return random.choice(["Yes", "No"])
+
+def run():
+    demo = gr.ChatInterface(random_response, title=os.environ.get("EXAMPLE"), description=os.environ.get("SECRET_EXAMPLE"))
+    demo.launch(server_name="0.0.0.0", server_port=7860)
+
+if __name__ == "__main__":
+    run()

requirements.txt

@@ -0,0 +1 @@
+gradio==4.18.0