Refine Docker installation

File hierarchy inside docker container now looks similar to scancodeio.
postgres data is now a docker volume, so it will persist even after
recreation.  .dockerignores makes sure that we don't overpopulate docker
images, improving build times.  A common environment variable for
containers is kept in docker.env
The python image we are using now explicitly states python:3.8

NOTE: We should have a postgres health check script which uses python
manage.py check --database default which comes with max_retries and
backoffs for `vulnerablecode` container.  Currently, docker's `restart:`
option is used but it has a caveat that it'll restart on non-db errors
as well.

Signed-off-by: Hritik Vijay <[email protected]>

.dockerignore

@@ -0,0 +1,4 @@
+.git
+.github
+
+venv

Dockerfile

@@ -1,10 +1,11 @@
-FROM python:3.9.6
+FROM python:3.8
 
 # Force unbuffered stdout and stderr (i.e. they are flushed to terminal immediately)
 ENV PYTHONUNBUFFERED 1
 
-RUN mkdir /vulnerablecode
-WORKDIR /vulnerablecode
-COPY . /vulnerablecode/
+RUN mkdir /opt/vulnerablecode && \
+    mkdir -p /var/vulnerablecode/static/
+WORKDIR /opt/vulnerablecode
+COPY . .
 RUN python -m pip install --upgrade pip && \
-		pip install -r requirements.txt
+    pip install -r requirements.txt

docker-compose.yml

@@ -5,6 +5,8 @@ services:
     image: postgres
     env_file:
       - docker.env
+    volumes:
+      - db_data:/var/lib/postgresql/data/
 
   vulnerablecode:
     build: .
@@ -15,7 +17,8 @@ services:
     env_file:
       - docker.env
     volumes:
-      - vulnerablecode:/vulnerablecode
+      - static:/var/vulnerablecode/static/
+    restart: on-failure
     depends_on:
       - db
 
@@ -24,7 +27,7 @@ services:
     env_file:
       - docker.env
     volumes:
-      - vulnerablecode:/vulnerablecode
+      - static:/var/vulnerablecode/static/
       - ./etc/nginx/templates/:/etc/nginx/templates/
     ports:
       - ${NGINX_PORT:-8000}:80
@@ -33,4 +36,6 @@ services:
 
 
 volumes:
-  vulnerablecode:
+  static:
+  db_data:
+

docker.env

@@ -1,9 +1,8 @@
-DJANGO_SETTINGS_MODULE=vulnerablecode.settings
-
 POSTGRES_DB=vulnerablecode
 POSTGRES_USER=vulnerablecode
 POSTGRES_PASSWORD=vulnerablecode
 
-GUNICORN_SERVER=vulnerablecode
+DJANGO_SETTINGS_MODULE=vulnerablecode.settings
+VULNERABLECODE_DB_HOST=db
 
-VC_DB_HOST=db
+GUNICORN_SERVER=vulnerablecode

etc/nginx/templates/default.conf.template

@@ -15,6 +15,6 @@ server {
 	}
 
 	location /static/ {
-		alias /vulnerablecode/static/;
+		alias /var/vulnerablecode/static/;
 	}
 }