# Use Python 3.12 slim image as base
FROM python:3.12-slim
# Build-time proxy arguments (for package installation)
ARG HTTP_PROXY
ARG HTTPS_PROXY
ARG NO_PROXY
ARG http_proxy
ARG https_proxy
ARG no_proxy
# Set working directory
WORKDIR /app
# Install system dependencies for lxml and Playwright/Chromium
RUN apt-get update && \
apt-get install -y --no-install-recommends \
gcc \
libxml2-dev \
libxslt1-dev \
# Chromium dependencies for Playwright
libnss3 \
libnspr4 \
libatk1.0-0 \
libatk-bridge2.0-0 \
libcups2 \
libdrm2 \
libxkbcommon0 \
libxcomposite1 \
libxdamage1 \
libxfixes3 \
libxrandr2 \
libgbm1 \
libasound2 \
libpango-1.0-0 \
libcairo2 \
fonts-liberation \
&& rm -rf /var/lib/apt/lists/*
# Install uv for faster package management
COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
# Copy dependency files only (for layer caching)
COPY pyproject.toml README.md ./
# Install dependencies first (cached layer - only invalidated when pyproject.toml changes)
# We install dependencies without the package itself to maximize cache hits
# Install with playwright optional dependency
RUN uv pip install --system \
mcp[cli] \
requests \
beautifulsoup4 \
markdownify \
lxml \
diskcache \
perplexityai \
playwright
# Set Playwright browser path BEFORE install so browsers go to correct location
ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
# Install Playwright browsers (Chromium only to minimize image size)
# Run as root to install system-wide, users will access via shared browser
RUN playwright install chromium --with-deps && \
chmod -R 755 /ms-playwright
# Copy application code last (invalidates fewer layers on source changes)
COPY src/ ./src/
# Install the package itself (fast, deps already cached)
RUN uv pip install --system --no-deps .
# Create cache directory with proper permissions
RUN mkdir -p /app/cache && chmod 777 /app/cache
# Create non-root user for security
RUN groupadd -r scraper && useradd -r -g scraper scraper
# Change ownership of app and cache directories
RUN chown -R scraper:scraper /app
# Playwright stores browsers in /root/.cache by default, make accessible
# The --with-deps flag installs to system location, so this may not be needed
# but we ensure the ms-playwright cache is accessible
RUN mkdir -p /home/scraper/.cache && chown -R scraper:scraper /home/scraper
# Switch to non-root user
USER scraper
# Expose default port
EXPOSE 8000
# Set Python path
ENV PYTHONPATH=/app
# Set cache directory environment variable
ENV CACHE_DIR=/app/cache
# Run the server
CMD ["python", "-m", "scraper_mcp"]
