# 构建阶段
FROM python:3.12.2-slim AS builder
ARG TARGETARCH
ARG TARGETVARIANT

# 使用中科大源加速
RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debian.sources

WORKDIR /build
COPY ./deploy/requirements.txt /build/

RUN --mount=type=cache,target=/var/cache/apt,id=apt-cache-$TARGETARCH$TARGETVARIANT-builder \
    --mount=type=cache,target=/root/.cache/pip,id=pip-cache-$TARGETARCH$TARGETVARIANT-builder \
    <<EOS
set -ex
apt-get update && \
apt-get install -y --no-install-recommends \
    gcc \
    python3-dev \
    libpq-dev \
    libjpeg-dev \
    zlib1g-dev \
    libfreetype6-dev && \
pip config set global.index-url https://mirrors.ustc.edu.cn/pypi/web/simple && \
pip install --no-cache-dir -r requirements.txt && \
apt-get purge -y gcc python3-dev && \
apt-get autoremove -y && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
EOS

# 运行阶段
FROM python:3.12.2-slim
ARG TARGETARCH
ARG TARGETVARIANT

# 使用中科大源加速
RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debian.sources

ENV OJ_ENV production
WORKDIR /app

# 创建必要的用户和组
RUN groupadd -g 903 spj && \
    useradd -u 900 -g spj -m -s /bin/bash server && \
    groupadd -r oj && \
    useradd -r -g oj -d /app oj && \
    mkdir -p /data/log /data/config /data/ssl /data/test_case /data/public/upload /data/public/avatar /data/public/website

RUN --mount=type=cache,target=/var/cache/apt,id=apt-cache-$TARGETARCH$TARGETVARIANT-final \
    <<EOS
set -ex
apt-get update && \
apt-get install -y --no-install-recommends \
    libpq5 \
    libjpeg62-turbo \
    zlib1g \
    libfreetype6 \
    supervisor \
    openssl \
    nginx \
    curl \
    unzip && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
EOS

COPY --from=builder /usr/local/lib/python3.12/site-packages/ /usr/local/lib/python3.12/site-packages/
COPY ./ /app/

# 设置目录权限
RUN chown -R oj:oj /app && \
    chown -R server:spj /data && \
    chmod -R u=rwX,go=rX /app && \
    chmod -R 750 /data && \
    chmod +x /app/deploy/entrypoint.sh

HEALTHCHECK --interval=5s CMD [ "/usr/local/bin/python3", "/app/deploy/health_check.py" ]
EXPOSE 8000
ENTRYPOINT [ "/app/deploy/entrypoint.sh" ]