A minimal Python 3.6 Dockerfile intended for microservices that need libc. Sets up an unprivileged user and expects the use of pipenv, gunicorn, and gevent.

Dockerfile

FROM python:3.6-slim

ENV PYTHONUNBUFFERED=1

ENV APP_USER=giraffe

ARG UID=1000
ARG GID=1000

ARG CWD=/app

ENV PYTHONPATH=${CWD}

RUN groupadd --system --gid "${GID}" "${APP_USER}" \
    && useradd --system --uid "${UID}" --gid "${APP_USER}" "${APP_USER}"

WORKDIR "${CWD}"

COPY . "${CWD}/"

RUN chown -R "${APP_USER}:${APP_USER}" "${CWD}"

# `g++` is required for building `gevent` but all build dependencies are
# later removed again.
RUN apt-get update \
    && apt-get install --yes --no-install-recommends \
        g++ \
    && pip install --upgrade pip setuptools wheel pipenv \
    && pipenv install --dev --system --deploy \
    && rm -rf /root/.cache/pip \
    && apt-get purge --yes g++ \
    && apt-get autoremove --yes \
    && apt-get clean \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*