Dockerfile

FROM ubuntu:24.04 as build
ENV DEBIAN_FRONTEND noninteractive
RUN apt-get -qq -y update \
    && apt-get -qq -y upgrade \
    && apt-get -qq -y install --no-install-recommends \
    apt-transport-https ca-certificates build-essential gnupg \
    tzdata curl python3-pip  python3-dev python3-venv \
    libicu-dev pkg-config libxml2-dev libxslt1-dev libleveldb-dev libleveldb1d \
    && apt-get -qq -y autoremove \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

RUN python3 -m venv /venv
ENV PATH="/venv/bin:$PATH"
RUN pip3 install --no-cache-dir -U pip six setuptools wheel
RUN pip3 install --no-cache-dir -U "pyicu==2.13.1"

COPY zavod /opensanctions/zavod
RUN pip install --no-cache-dir -e /opensanctions/zavod
WORKDIR /opensanctions

FROM ubuntu:24.04 as runtime

LABEL org.opencontainers.image.title "OpenSanctions ETL"
LABEL org.opencontainers.image.licenses MIT
LABEL org.opencontainers.image.source https://github.com/opensanctions/opensanctions

ENV DEBIAN_FRONTEND noninteractive
RUN apt-get -qq -y update \
    && apt-get -qq -y upgrade \
    && apt-get -qq -y install --no-install-recommends \
    locales apt-transport-https ca-certificates gnupg \
    tzdata curl python3-pip python3-venv poppler-utils poppler-data \
    libicu74 libleveldb1d \
    && apt-get -qq -y autoremove \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

ENV LANG="en_US.UTF-8" \
    TZ="UTC" \
    ZAVOD_DATA_PATH="/opensanctions/data" \
    OPENSSL_CONF="/opensanctions/contrib/openssl.cnf"

RUN localedef -i en_US -c -f UTF-8 -A /usr/share/locale/locale.alias en_US.UTF-8 \
    && ln -fs /usr/share/zoneinfo/Etc/UTC /etc/localtime \
    && dpkg-reconfigure -f noninteractive tzdata \
    && groupadd -g 10023 -r app \
    && useradd -m -u 10023 -s /bin/false -g app app

COPY --from=build /venv /venv
ENV PATH="/venv/bin:$PATH"
COPY . /opensanctions
RUN pip install --no-cache-dir -e /opensanctions/zavod
WORKDIR /opensanctions

CMD ["zavod"]