Livrare LOT 1 - Didi

ai_platform/modules/forensic_features/Dockerfile

@@ -0,0 +1,96 @@
+# syntax=docker/dockerfile:1.7
+# ──────────────────────────────────────────────────────────────────────────
+# Forensic Features API — Lean Container
+#
+# Imagine finală estimată: ~1.5 GB
+# (vs ~8 GB cu transformers/torch/autogluon — neincluse aici)
+#
+# Build:    docker build -t forensic-features:latest .
+# Run:      docker run -p 8080:8080 forensic-features:latest
+# ──────────────────────────────────────────────────────────────────────────
+
+
+# ═══ Stage 1: Builder ═══════════════════════════════════════════════════
+FROM python:3.12-slim-bookworm AS builder
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        build-essential \
+        gcc \
+        g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+ENV VIRTUAL_ENV=/opt/venv
+RUN python -m venv $VIRTUAL_ENV
+ENV PATH="$VIRTUAL_ENV/bin:$PATH"
+
+RUN pip install --no-cache-dir --upgrade pip setuptools wheel
+
+COPY requirements.txt /tmp/requirements.txt
+RUN pip install --no-cache-dir -r /tmp/requirements.txt
+
+
+# ═══ Stage 2: Runtime ═══════════════════════════════════════════════════
+FROM python:3.12-slim-bookworm AS runtime
+
+# Sistem deps minime:
+#   ffmpeg       — frame + audio extraction
+#   libgl1       — OpenCV runtime
+#   libglib2.0-0 — OpenCV glib runtime
+#   libgles2     — MediaPipe OpenGL ES (libGLESv2.so.2)
+#   libegl1      — MediaPipe EGL (libEGL.so.1)
+#   libgomp1     — OpenMP
+#   curl         — pentru healthcheck
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        ffmpeg \
+        libgl1 \
+        libglib2.0-0 \
+        libgomp1 \
+        libgles2 \
+        libegl1 \
+        curl \
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean
+
+# Copiem venv-ul pre-construit
+COPY --from=builder /opt/venv /opt/venv
+ENV VIRTUAL_ENV=/opt/venv
+ENV PATH="$VIRTUAL_ENV/bin:$PATH"
+
+# Non-root user pentru securitate
+RUN groupadd --system --gid 1001 app \
+    && useradd --system --uid 1001 --gid app --create-home --home-dir /home/app app
+
+WORKDIR /app
+
+# ── Copiere cod (ordine: stabil → modificat des, pentru cache optim) ────
+
+# 1. MediaPipe model (rar modificat, ~3.6 MB)
+COPY --chown=app:app face_landmarker.task ./
+
+# 2. Tools forensice (5 module)
+COPY --chown=app:app tools/ ./tools/
+
+# 3. Glue layer
+COPY --chown=app:app forensic/ ./forensic/
+
+# 4. Core API + preprocessing (cele mai des modificate)
+COPY --chown=app:app api.py preprocessing.py ./
+COPY --chown=app:app requirements.txt ./
+
+# Directoare runtime
+RUN mkdir -p /app/data/inference /app/data/results \
+    && chown -R app:app /app
+
+USER app
+
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    API_HOST=0.0.0.0 \
+    API_PORT=8080
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
+    CMD curl --fail --silent --max-time 5 http://localhost:8080/health || exit 1
+
+CMD ["python", "api.py"]