Dockerfile

# This Dockerfile relies on ARGs and ENVs defined in the upstream
# Airflow Dockerfile: https://github.com/apache/airflow/blob/main/Dockerfile

ARG AIRFLOW_VERSION="3.2.1"
ARG AIRFLOW_IMAGE_NAME="apache/airflow:${AIRFLOW_VERSION}"

FROM ${AIRFLOW_IMAGE_NAME}
ENV AIRFLOW_VERSION="${AIRFLOW_VERSION}"
ENV AIRFLOW__CORE__DAGS_FOLDER="${AIRFLOW_HOME}/mokelumne/dags"

USER root

RUN umask 0002; \
    mkdir -p "${AIRFLOW_USER_HOME_DIR}/artifacts"; \
    chown -R airflow:0 "${AIRFLOW_USER_HOME_DIR}/artifacts"

RUN apt-get update -y && apt-get upgrade -y \
    && apt-get install -y postgresql-client && rm -rf /var/lib/apt/lists/

USER airflow
WORKDIR $AIRFLOW_HOME

# Install pinned PyPI dependencies first to maximize layer cache hits.
# python-tind-client is installed separately because pip cannot verify
# hashes on git-sourced packages.
COPY --chown=airflow:0 requirements.txt ./
RUN pip install --no-cache-dir --require-hashes -r requirements.txt

# Install the project itself without pulling dependencies.
COPY --chown=airflow:0 pyproject.toml ./
COPY --chown=airflow:0 mokelumne mokelumne
COPY --chown=airflow:0 plugins plugins
COPY --chown=airflow:0 webserver_config.py .
COPY --chown=airflow:0 test test
RUN pip install --no-cache-dir --no-deps .

# Fail the build if any installed package has unsatisfied dependencies.
# This catches conflicts between our pins and the base image's packages.
RUN pip check

# WORKDIR influences the value of $HOME in at least Podman.
# Since Python's `getuserbase()` uses $HOME/.local, this means that we fail
# the airflow-init task in Podman because $HOME/.local does not contain any
# packages.  Setting PYTHONUSERBASE explicitly won't harm Docker workloads,
# and is arguably the correct thing to do anyway since the value of $HOME
# is not always guaranteed in Docker either.
ENV PYTHONUSERBASE=${AIRFLOW_USER_HOME_DIR}/.local