FROM python:3.14-slim AS builder
# Install system dependencies required for Cartopy and other packages
RUN apt-get update && apt-get install -y \
build-essential \
g++ \
gcc \
libproj-dev \
proj-data \
proj-bin \
libgeos-dev \
&& rm -rf /var/lib/apt/lists/*
# Create non-root user
RUN groupadd --gid 1000 app && \
useradd --uid 1000 --gid app --shell /bin/bash --create-home app
# Install uv
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
# Set working directory and change ownership
WORKDIR /app
RUN chown app:app /app
# Switch to non-root user
USER app
# Copy source code and download script
COPY --chown=app:app src/ ./src/
COPY --chown=app:app scripts/download_cartopy_data.py ./
# Sync the project
RUN --mount=type=cache,target=/home/app/.cache/uv,uid=1000,gid=1000 \
--mount=type=bind,source=uv.lock,target=uv.lock \
--mount=type=bind,source=pyproject.toml,target=pyproject.toml \
--mount=type=bind,source=README.md,target=README.md \
uv sync --no-dev --locked --no-editable
# Pre-download Cartopy map data to avoid runtime downloads
RUN /app/.venv/bin/python download_cartopy_data.py
FROM python:3.14-slim AS runner
# Install runtime dependencies for Cartopy
RUN apt-get update && apt-get install -y \
libproj25 \
libgeos-c1v5 \
&& rm -rf /var/lib/apt/lists/*
# Create non-root user (same as builder stage)
RUN groupadd --gid 1000 app && \
useradd --uid 1000 --gid app --shell /bin/bash --create-home app
# Create app directory and set ownership
WORKDIR /app
RUN chown app:app /app
# Copy the environment, but not the source code
COPY --from=builder --chown=app:app /app/.venv /app/.venv
# Copy Cartopy data cache from builder stage
ENV CARTOPY_DATA_DIR=/app/cartopy-data
RUN mkdir -p ${CARTOPY_DATA_DIR} && chown app:app ${CARTOPY_DATA_DIR}
COPY --from=builder --chown=app:app /home/app/.local/share/cartopy ${CARTOPY_DATA_DIR}
# Create matplotlib config directory
RUN mkdir -p /tmp/matplotlib && chown app:app /tmp/matplotlib
ENV MPLCONFIGDIR=/tmp/matplotlib
# Switch to non-root user
USER app
# Expose port
EXPOSE 9090
# Run the application
CMD ["/app/.venv/bin/plotting-mcp"]
