Base Superset image on the Red Hat UBI (#103)

* Replace base image with the Red Hat UBI
* Convert Superset Dockerfile into multi-stage build

Author: siegfriedweber

conf.py

@@ -118,11 +118,11 @@
         'versions': [
             {
                 'product': '1.3.2',
-                '_base_image_tag': '286ba5d37d4e240d01bbefd2307a816829cf512d',
+                'python': '38',
             },
             {
                 'product': '1.4.1',
-                '_base_image_tag': '26545a26d195b79ab6e838631e86cb0bf20f3ced',
+                'python': '39',
             },
         ],
     },

superset/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [superset-stackable2.0.0] - 2022-04-28
+
+### Changed
+
+- BREAKING: Replace base image with the Red Hat Univeral Base Image. The
+  location for the Superset configuration file changed to
+  `/stackable/app/pythonpath` ([#103]).
+
+[#103]: https://github.com/stackabletech/docker-images/pull/103
+
 ## [superset-stackable1.0.0] - 2022-04-14
 
 ### Removed

superset/Dockerfile

@@ -1,12 +1,48 @@
-# We use the official Superset image here instead of building our own from scratch
-# to avoid having to deal with python dependencies and Nexus integration. We might
-# change this in the future.
+# Build stage
+
+FROM registry.access.redhat.com/ubi8/ubi-minimal:8.5 as builder
 
 ARG PRODUCT
-ARG _BASE_IMAGE_TAG
-ARG RELEASE="1"
+ARG PYTHON
+
+COPY superset/constraints-${PRODUCT}.txt /tmp/constraints.txt
+
+RUN microdnf update \
+    && microdnf install \
+        --assumeyes \
+        cyrus-sasl-devel \
+        gcc \
+        gcc-c++ \
+        libffi-devel \
+        openldap-devel \
+        openssl-devel \
+        python${PYTHON}-devel \
+        python${PYTHON}-pip \
+        python${PYTHON}-wheel \
+    && microdnf clean all \
+    && python3 -m venv /stackable/app \
+    && source /stackable/app/bin/activate \
+    && pip install \
+        --no-cache-dir \
+        --upgrade \
+        setuptools \
+        pip \
+    && pip install \
+        --no-cache-dir \
+        --upgrade \
+        --constraint /tmp/constraints.txt \
+        apache-superset==${PRODUCT} \
+        gevent \
+        psycopg2-binary \
+        statsd \
+        python-ldap
+
+# Final image
 
-FROM apache/superset:$_BASE_IMAGE_TAG
+FROM registry.access.redhat.com/ubi8/ubi-minimal:8.5
+
+ARG PYTHON
+ARG RELEASE=1
 
 LABEL name="Apache Superset" \
       maintainer="[email protected]" \
@@ -16,12 +52,40 @@ LABEL name="Apache Superset" \
       summary="The Stackable image for Apache Superset." \
       description="This image is deployed by the Stackable Operator for Apache Superset."
 
+ENV FLASK_ENV="production" \
+    HOME="/stackable" \
+    SUPERSET_PORT="8088"
+ENV PATH="${HOME}/app/bin:${PATH}" \
+    PYTHONPATH="${HOME}/app/pythonpath"
+
+RUN microdnf update \
+    && microdnf install \
+        --assumeyes \
+        cyrus-sasl \
+        openldap \
+        openldap-clients \
+        openssl-libs \
+        openssl-pkcs11 \
+        python${PYTHON} \
+        shadow-utils \
+    && microdnf clean all \
+    && groupadd --gid 1000 stackable \
+    && useradd --uid 1000 --gid stackable --home-dir ${HOME} stackable
+
 COPY superset/licenses /licenses
+COPY --from=builder /stackable ${HOME}
+
+RUN chown --recursive stackable:stackable ${HOME}
 
-USER root
-RUN apt update &&\
-    apt install -y python3-dev libldap2-dev libsasl2-dev libssl-dev &&\
-    rm -rf /var/lib/apt/lists/*
-USER superset
+USER stackable
+WORKDIR ${HOME}
 
-RUN pip install statsd python-ldap
+CMD ["/bin/sh", "-c", \
+    "gunicorn \
+    --bind 0.0.0.0:${SUPERSET_PORT} \
+    --worker-class gthread \
+    --threads 20 \
+    --timeout 60 \
+    --limit-request-line 0 \
+    --limit-request-field_size 0 \
+    'superset.app:create_app()'"]