@leverege/build-tools 2.61.7 → 2.62.0-alpha.1

package/src/docker-to-registry-py.mjs

@@ -0,0 +1,291 @@
+#!/usr/bin/env node
+/*
+ * docker-to-registry-py will...
+ */
+import fs from 'node:fs'
+import toml from 'toml'
+import chalk from 'chalk'
+import semver from 'semver'
+
+import {
+  debug, log,
+  errorExit,
+  getGitBranchAndUpstream,
+  gitRepoIsDirty,
+  parseHelmChart,
+  proceed,
+  shellCmd } from './Utils.mjs'
+
+import Docker from './DockerPy.mjs'
+import { version } from 'node:os'
+
+// refresh-npm-token does not throw so no need to try, but it emits in debug
+const refreshErr = await shellCmd( 'refresh-npm-token' )
+if ( refreshErr && !process.env.BUILD_TOOLS_DEBUG ) {
+  log( refreshErr ) // most likely the token refreshed message
+}
+
+const options = {}
+let imageVersion = null
+// Expected to be invoked like docker-to-registry-py v1.2.3
+for ( let n = 2; n < process.argv.length; n++ ) {
+  if ( process.argv[n].startsWith( '-' ) ) {
+    const str = process.argv[n].slice( 1 )
+    if ( str.indexOf( '=' ) > 0 ) {
+      const [ key, value ] = str.split( '=' )
+      options[key] = value
+    } else {
+      options[str] = true
+    }
+  } else {
+    imageVersion = process.argv[n]
+  }
+}
+if ( !imageVersion ) {
+  errorExit( '***Error: docker-to-registry-py requires an image version' )
+}
+
+// may use guide-me or guideme to ask for update guidance
+const giveGuidance = imageVersion.match( /^guide-*me$/ ) !== null
+
+const willGitTag = imageVersion.match( /^v\d+\.\d+\.\d+$/ )
+const tagInfo = willGitTag ?
+  chalk.yellow.bold( 'will be git tagged' ) :
+  chalk.red( 'BETA RELEASE WILL NOT BE GIT TAGGED' )
+
+const repoIsDirty = await gitRepoIsDirty()
+
+if ( willGitTag && repoIsDirty ) {
+  log( `
+  ${chalk.red.bold( '***ERROR: attempting to tag a non-beta dirty git repository' )}
+
+  You are attempting to create a tagged release image for pushing to the
+  artifact registry, but there are locally modified files. This is not
+  allowed since the applied tag will not be relevant to the image version
+  due to the pending commits.
+
+  Available options for proceeding:
+
+    ${chalk.green.bold( '1) cleanly commit all local mods assuming relevance' )}
+    ${chalk.yellow( '2) eliminate unwanted local modifications' )}
+    ${chalk.red( '3) stash anything that is irrelevant to this release' )}
+
+  ` )
+  process.exit( 1 )
+}
+
+if ( !fs.existsSync( './helm' ) ) {
+  log( `
+  ${chalk.red.bold( '***Error: docker-to-registry-py requires a helm chart directory' )}
+
+  The docker-to-registry-py script expects to run in the root directory of a k8s
+  service, which requires a helm chart directory. It also expects a docker
+  directory but will build that if it does not exist.
+
+  ` )
+  process.exit( 1 )
+}
+
+const tomlStr = fs.readFileSync( './pyproject.toml' )
+const pyproject = toml.parse( tomlStr )
+const repoDescr = {
+  artifactProject : pyproject.leverege.project || 'leverege-registry',
+  containerName : pyproject.project.name,
+  packageVersion : pyproject.project.version,
+  artifactRegistry : pyproject.leverege.registry || 'us-docker.pkg.dev/leverege-registry/stack',
+  registryFolder : `${pyproject.leverege.registryFolder}/images/${pyproject.project.name}`,
+  imageBase : pyproject.leverege.imageBase,
+  helmChart : await parseHelmChart(),
+}
+
+debug( { repoDescr }, '<==The Repo Description' )
+
+const dockerInfo = await Docker.generateDockerfile( {
+  regvers : repoDescr.packageVersion,
+  imageBase : repoDescr.imageBase,
+} )
+
+debug( { dockerInfo }, '<==The Docker Info' )
+
+const {
+  artifactProject,
+  artifactRegistry,
+  packageVersion,
+  containerName,
+  helmChart,
+} = repoDescr
+
+if ( giveGuidance ) {
+  await Docker.validateCloudBuildBucket( artifactProject )
+}
+
+const registryFolder = `${artifactRegistry}/images/${containerName}`
+
+// Update the dependencies...
+log( chalk.green.bold( 'Updating dependencies and workspace...' ) )
+await shellCmd( 'npm install', { stdio : 'inherit' } )
+
+if ( giveGuidance ) {
+  await Docker.repoCleanup() // adjusts gitignore files and removes cruft
+  log( `
+
+
+
+  ${chalk.green.bold( '-------------------- Potential Helm Chart Mods --------------------' )}
+
+  Moving to the new artifact-registry for docker image storage may also require
+  helm chart changes depending on how old the current charts are. Charts that
+  contain helm/values.yaml files resembling this:
+
+  ${chalk.yellow.bold( `serviceConfig:
+    VERSION: v1.2.3
+    PREEMPTIBLE: true` )}
+
+  are pre-ignition era charts and should be replaced with the latest helm chart
+  templates available from ignition. Either dive in or ask devops for a hand
+  when converting these legacy / deprecated charts.
+
+
+  More recently updated helm charts that have already started the migration to
+  the new approach may already have registry entries like this:
+
+  ${chalk.yellow.bold( `image:
+    registry: gcr.io/leverege-docker-images
+    tag: ""` )}
+
+  The above registry statement references the deprecated container registry and
+  must be adjusted accordingly to resemble:
+
+    ${chalk.green.bold( 'registry: us-docker.pkg.dev/leverege-registry/<registry folder>/images' )}
+
+  There may also be a corresponding modification needed in the helm template
+  deployment.yaml file in the container image spec:
+
+    ${chalk.green.bold( 'image: {{ .Values.image.registry }}/{{ .Chart.Name }}:{{ default .Chart.AppVersion .Values.image.tag }}' )}
+
+
+  ${chalk.magenta.bold( `Upgrading all service charts to the latest ignition template chart structure
+  is the preferred approach to making the transition to the artifact registry.` )}
+
+  ` )
+  log( chalk.green.bold( '*** docker-to-registry-py guidance complete - ready for dockerization ***' ) )
+  process.exit( 0 )
+}
+
+// do chart checks too
+let chart
+if ( options?.helmChecks !== 'false' ) {
+  chart = helmChart?.yaml['Chart.yaml']
+  const values = helmChart?.yaml['values.yaml']
+  const expectedChartRegistry = `${artifactRegistry}/images`
+
+  if ( expectedChartRegistry !== values.image?.registry ) {
+    log( `
+  ${chalk.red.bold( '***Error: mismatched package.json registry and helm/values.yaml' )}
+
+  The registry specified in the package.json leverege stanza does not line up
+  with the image registry in helm/values.yaml. The naming convention expects
+  the '/images' suffix to be added to the package.json registry string and then
+  stored as the image.registry in the helm/values.yaml file.
+
+    Current settings:
+      package.json registry => ${chalk.yellow.bold( artifactRegistry )}
+      values.yaml  registry => ${chalk.red.bold( values.image?.registry )}
+
+    Expected settings:
+      values.yaml  registry => ${chalk.green.bold( expectedChartRegistry )}
+  ` )
+
+    if ( !values.image ) {
+      log( `
+  ${chalk.yellow.bold( '***DEPRECATED: legacy helm charts detected' )}
+
+  The helm chart structure appears to be based on the pre-ignition helm chart
+  layouts. The charts must be upgraded before docker-to-registry-py can complete
+  its job.
+
+    ` )
+    }
+
+    process.exit( 1 )
+  }
+}
+
+// Give the summary and the user a chance to proceed or not
+log( `
+  ${chalk.green.bold( 'Build Information:' )}
+    Container:     ${chalk.green.bold( containerName )}
+    Version:       ${chalk.green.bold( imageVersion )}   ${tagInfo}
+    Registry:      ${chalk.green.bold( artifactRegistry )}
+    Image Folder:  ${chalk.yellow.bold( registryFolder )}
+
+  ${chalk.green.bold( 'Docker Information:' )}
+    NodeImage:     ${chalk.green.bold( dockerInfo.imageBase || `node:${dockerInfo.nodeimage}` )}
+    Docker Env:    ${chalk.green.bold( dockerInfo.buildEnv || 'alpine' )}
+    AddedPkgs:     ${chalk.green.bold( dockerInfo.apkadds )}
+    Run User:      ${chalk.green.bold( dockerInfo.runuser )}
+    Previous:      ${chalk.yellow.bold( dockerInfo.previousBuild )}
+    DateStamp:     ${chalk.green.bold( dockerInfo.date )}
+    NPM Logs:      ${chalk.green.bold( dockerInfo.npmlogging )}
+    NPM Version:   ${chalk.green.bold( dockerInfo.npmVersion )}
+` )
+
+if ( imageVersion !== packageVersion ) {
+  log( `
+  ${chalk.yellow.bold( '***WARNING: specified version does not match project version' )}
+        pyproject.toml => ${chalk.green.bold( packageVersion )}
+        specified    => ${chalk.red.bold( imageVersion )}
+  ` )
+
+  if ( willGitTag ) {
+    log( chalk.red.bold( '... and you are attempting to release so NOPE!\n' ) )
+    process.exit( 1 )
+  }
+}
+
+const repoInfo = await getGitBranchAndUpstream()
+
+if ( willGitTag && !repoInfo.upstream ) {
+  log( `
+  ${chalk.red.bold( '***ERROR: the current branch must have an upstream' )}
+
+  You are attempting to create a tagged release image for pushing to the
+  container registry, but the current branch does not have an upstream to
+  push to. This is not allowed since the applied tag will be stranded here
+  in your local repository, which is what we are trying to avoid.
+
+  Available options for proceeding:` )
+  log( chalk.green.bold( `
+    1) set an upstream for this branch via:
+           git push --set-upstream origin ${repoInfo.branch}` ) )
+  log( chalk.yellow.bold( `
+    2) rebase, squash and merge onto a branch with an upstream` ) )
+
+  process.exit( 1 )
+}
+
+if ( willGitTag ) {
+  if ( chart.appVersion !== imageVersion ) {
+    log( `
+  ${chalk.yellow.bold( '***WARNING: the helm/Chart.yaml appVersion does not align with the build version' )}
+    chart appVersion => ${chalk.yellow.bold( chart.appVersion )}
+    build version    => ${chalk.green.bold( imageVersion )}
+  ` )
+  }
+}
+
+await proceed()
+
+log( chalk.green.bold( 'Building the Docker Image...' ) )
+await Docker.buildContainerImage( { ...repoDescr, options, imageVersion } )
+log( chalk.blue.bold( 'Done Building the Docker Image...' ) )
+
+if ( willGitTag ) {
+  const tagDescription = `docker_${imageVersion}`
+  const fullImageTag = repoDescr.isMonoRepo ? `${repoDescr.containerName}/${imageVersion}` : imageVersion
+  log( chalk.green.bold( `Tagging and Pushing ${fullImageTag}\n` ) )
+  await shellCmd( `git tag -f ${fullImageTag} -m ${tagDescription}` )
+  await shellCmd( 'git push --follow-tags' )
+} else {
+  log( chalk.yellow.bold( '\n*** Skipped git tagging - beta release' ) )
+}

package/src/docker-to-registry.mjs

@@ -272,9 +272,7 @@ if ( willGitTag ) {
   }
 }
 
-if ( process.env.DRY_RUN !== '1' ) {
-  await proceed()
-}
+await proceed()
 
 if ( isNpmWorkspace ) {
   log( chalk.yellow.bold( 'Generating an NPM workspace package-lock.json file' ) )

package/src/docker-to-registry.sh

@@ -19,7 +19,7 @@ cat<<DEPRECATED_TOOL
   `color y "***DEPRECATED docker-to-registry.sh - upgrade to docker-to-registry.mjs***"`
 
 DEPRECATED_TOOL
-exit 1
+sleep 3
 
 PKGTOP="$npm_config_local_prefix"
 cd $PKGTOP/docker

package/src/helm-charts/cnpg-db-pgbench/cluster.yaml.ovh

@@ -1,3 +1,5 @@
+# Artifact Chart  => https://artifacthub.io/packages/helm/cloudnative-pg/cloudnative-pg
+# Examples Charts => https://cloudnative-pg.io/documentation/current/samples/
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -8,7 +10,7 @@ spec:
   logLevel: info # warning debug
 
   description: "Leverege PG Bench Timescale DB"
-  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:17.2-cnpg-lvrg-rel.2
+  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:16.1-cnpg-tsdb2-beta.6
   bootstrap:
     initdb:
       postInitTemplateSQL:
@@ -58,7 +60,6 @@ spec:
   # - supervised: requires manual supervision to perform
   #               the switchover of the primary
   primaryUpdateStrategy: unsupervised
-  primaryUpdateMethod: switchover
 
   serviceAccountTemplate:
     metadata:

package/src/helm-charts/cnpg-db-psql-stack/cluster.yaml.ovh

@@ -1,3 +1,5 @@
+# Artifact Chart  => https://artifacthub.io/packages/helm/cloudnative-pg/cloudnative-pg
+# Examples Charts => https://cloudnative-pg.io/documentation/current/samples/
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -11,7 +13,7 @@ spec:
     enablePodMonitor: false # set true once monitoring is setup
 
   description: "Leverege Stack PostgreSQL DB"
-  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:17.2-cnpg-lvrg-rel.2
+  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:16.4-cnpg-tsdb2-rel.1
   bootstrap:
     initdb:
 #     database: models # do not set - let it default to cnpg app db
@@ -64,7 +66,6 @@ spec:
   # - supervised: requires manual supervision to perform
   #               the switchover of the primary
   primaryUpdateStrategy: unsupervised
-  primaryUpdateMethod: switchover
 
   serviceAccountTemplate:
     metadata:

package/src/helm-charts/cnpg-db-recovery/cluster.yaml.ovh

@@ -1,3 +1,5 @@
+# Artifact Chart  => https://artifacthub.io/packages/helm/cloudnative-pg/cloudnative-pg
+# Examples Charts => https://cloudnative-pg.io/documentation/current/samples/
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -11,7 +13,7 @@ spec:
     enablePodMonitor: false # set true once monitoring is setup
 
   description: "Leverege CNPG DB (recovered)"
-  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:17.2-cnpg-lvrg-rel.2
+  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:16.4-cnpg-tsdb2-rel.1
   bootstrap:
     recovery:
       volumeSnapshots:
@@ -59,7 +61,6 @@ spec:
   # - supervised: requires manual supervision to perform
   #               the switchover of the primary
   primaryUpdateStrategy: unsupervised
-  primaryUpdateMethod: switchover
 
   serviceAccountTemplate:
     metadata:

package/src/helm-charts/cnpg-db-tsdb-basic/cluster.yaml.ovh

@@ -1,3 +1,5 @@
+# Artifact Chart  => https://artifacthub.io/packages/helm/cloudnative-pg/cloudnative-pg
+# Examples Charts => https://cloudnative-pg.io/documentation/current/samples/
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -11,7 +13,7 @@ spec:
     enablePodMonitor: false # set true once monitoring is setup
 
   description: "Leverege Plain Timescale DB"
-  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:17.2-cnpg-lvrg-rel.2
+  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:16.4-cnpg-tsdb2-rel.1
   bootstrap:
     initdb:
 #     database: imagine # let it default to cnpg app db
@@ -72,7 +74,6 @@ spec:
   # - supervised: requires manual supervision to perform
   #               the switchover of the primary
   primaryUpdateStrategy: unsupervised
-  primaryUpdateMethod: switchover
 
   serviceAccountTemplate:
     metadata:

package/src/helm-charts/cnpg-db-tsdb-dense/cluster.yaml.ovh

@@ -1,3 +1,5 @@
+# Artifact Chart  => https://artifacthub.io/packages/helm/cloudnative-pg/cloudnative-pg
+# Examples Charts => https://cloudnative-pg.io/documentation/current/samples/
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
@@ -11,7 +13,7 @@ spec:
     enablePodMonitor: false # set true once monitoring is setup
 
   description: "Leverege Dense Timescale DB"
-  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:17.2-cnpg-lvrg-rel.2
+  imageName: us-docker.pkg.dev/leverege-registry/system/images/leverege-pgsql:16.4-cnpg-tsdb2-rel.1
   bootstrap:
     initdb:
       postInitTemplateSQL:
@@ -67,7 +69,6 @@ spec:
   # - supervised: requires manual supervision to perform
   #               the switchover of the primary
   primaryUpdateStrategy: unsupervised
-  primaryUpdateMethod: switchover
 
   serviceAccountTemplate:
     metadata:

package/src/helm-charts/prom-operator/helmup.plugin

@@ -4,23 +4,20 @@ showInstalling "The Prometheus Operator and Components"
 addHelmRepo prometheus-community https://prometheus-community.github.io/helm-charts
 
 showInstalling "The Prometheus Operator (kube-prometheus-stack)"
-[ -z "$PROMETHEUS_STACK_CHART_VERSION" ] && PROMETHEUS_STACK_CHART_VERSION="68"
+[ -z "$PROMETHEUS_STACK_CHART_VERSION" ] && PROMETHEUS_STACK_CHART_VERSION="67"
 
 NS="--namespace prometheus"
 
-# https://artifacthub.io/packages/helm/prometheus-community/kube-prometheus-stack
 helm upgrade $NS --install prometheus-stack prometheus-community/kube-prometheus-stack \
                  --values  prom-operator/prometheus-stack.yaml \
                  --version $PROMETHEUS_STACK_CHART_VERSION $HELM_WHAT
 
-# https://artifacthub.io/packages/helm/prometheus-community/prometheus-elasticsearch-exporter
 showInstalling "The Elasticsearch Exporter (prom-operator)"
 [ -z "$ELASTICSEARCH_EXPORTER_CHART_VERSION" ] && ELASTICSEARCH_EXPORTER_CHART_VERSION="6"
 helm upgrade $NS --install elasticsearch8-exporter prometheus-community/prometheus-elasticsearch-exporter \
                  --values prom-operator/elasticsearch-exporter.yaml \
                  --version $ELASTICSEARCH_EXPORTER_CHART_VERSION $HELM_WHAT
 
-# https://artifacthub.io/packages/helm/prometheus-community/prometheus-stackdriver-exporter
 showInstalling "The Stackdriver Exporter (prom-operator)"
 [ -z "$STACKDRIVER_EXPORTER_CHART_VERSION" ] && STACKDRIVER_EXPORTER_CHART_VERSION="4"
 helm upgrade $NS --install stackdriver-exporter prometheus-community/prometheus-stackdriver-exporter \

package/src/hook-and-release/Config.mjs

@@ -128,15 +128,6 @@ export default class Config {
 
   async bootstrapHookAndRelease() {
     const repoDescr = await getRepositoryDescr()
-    if ( !repoDescr.isGitRepo ) {
-      const notGitRepo = `
-  The hook-and-release script only works with git repositories. Try running:
-
-      git init && hook-and-release --init
-
-  to initialize git and hook-and-release.`
-      errorExit( notGitRepo )
-    }
     this.gitRoot = repoDescr.gitRoot
     this.gitBranch = repoDescr.gitBranch
     this.gitHooksPath = repoDescr.gitHooksPath

package/src/templates/bashrcTemplatePy.hbs

@@ -0,0 +1 @@
+export PYTHONPYCACHEPREFIX=/tmp/pycache

package/src/templates/dockerfileTemplate.hbs

@@ -1,4 +1,4 @@
-# Version {{regvers}} @ {{date}} / Git Ref: {{gitReference}}
+# Version {{regvers}} @ {{date}}
 
 # The FROM directive sets the Base Image for subsequent instructions
 FROM {{image}} as intermediate
@@ -25,11 +25,11 @@ COPY ./.npmrc ${NPM_CONFIG_USERCONFIG}
 RUN if [ "${BUILD_ENV}" = "debian" ]; then \
       apt-get update && \
       apt-get install -y wget openssh-client build-essential && \
-      npm install -g {{npmVersion}}; \
+      npm install -g npm@10; \
     else \
       apk --no-cache add openssh-client && \
       apk --update add --no-cache --virtual build-dep g++ gcc libgcc libstdc++ linux-headers make {{apkadds}} && \
-      npm install -g {{npmVersion}}; \
+      npm install -g npm@10; \
     fi
 
 # Use SKIP_PREPARE to disable hook-and-release from running
@@ -58,13 +58,13 @@ COPY ./.npmrc ${NPM_CONFIG_USERCONFIG}
 RUN if [ "$BUILD_ENV" = "debian" ]; then \
       apt-get update && \
       apt-get install -y tini bash curl vim {{apkadds}} && \
-      npm install -g {{npmVersion}} && \
+      npm install -g npm@10 && \
       rm /bin/sh && ln -s /bin/bash /bin/sh && \
       mkdir -p /usr/src/app /tmp/levlog && chown node:node /usr/src/app; \
     else \
       apk update && \
       apk add --no-cache bash curl tini vim {{apkadds}} && \
-      npm install -g {{npmVersion}} && \
+      npm install -g npm@10 && \
       rm /bin/sh && ln -s /bin/bash /bin/sh && \
       mkdir -p /usr/src/app /tmp/levlog && chown node:node /usr/src/app; \
     fi
@@ -83,4 +83,4 @@ COPY --chown=node:node --from=intermediate /usr/src/app /usr/src/app
 
 USER {{runuser}}
 COPY ./bashrc /home/node/.bashrc
-CMD [ "/bin/bash", "-c", "source /home/node/.bashrc && node index.js" ]
+CMD [ "/bin/bash", "-c", "source /home/node/.bashrc && node index.js" ]

package/src/templates/dockerfileTemplatePy.hbs

@@ -0,0 +1,75 @@
+# Version {{regvers}} @ {{date}}
+
+# The FROM directive sets the Base Image for subsequent instructions
+FROM {{image}} as intermediate
+
+ARG BUILD_ENV="{{buildEnv}}"
+
+RUN apt-get update && apt-get install -y \
+    wget
+#    gcc \
+#    git \
+#    libgl1 \
+#    libglib2.0-0 \
+#    && rm -rf /var/lib/apt/lists/*
+
+# Copy uv binary from the official distroless Docker image.
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /bin/uv
+
+# Define the working directory.
+WORKDIR /usr/src/app
+
+#ENV NODE_ENV production
+#ENV NPM_CONFIG_USERCONFIG /usr/src/app/.npmrc
+
+RUN mkdir -p /usr/src/app
+WORKDIR /usr/src/app
+
+# Install app dependencies
+COPY ./workspace/ /usr/src/app/
+ENV GRPC_VERBOSITY ERROR
+
+
+# Setup pip.conf for Google Artifact Registry.
+RUN mkdir -p ~/.config/pip
+RUN echo "[global]" >> ~/.config/pip/pip.conf && \
+    echo "break-system-packages = true" >> ~/.config/pip/pip.conf 
+
+
+# Set up the virtual environment.
+RUN uv venv
+ENV VIRTUAL_ENV=/usr/src/app/.venv
+ENV PATH="$VIRTUAL_ENV/bin:$PATH"
+
+# Setup keyring for Google Artifact Registry.
+RUN uv pip install keyring
+RUN uv pip install keyrings.google-artifactregistry-auth
+
+RUN echo "extra-index-url = https://oauth2accesstoken@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple" >> ~/.config/pip/pip.conf
+
+ENV UV_EXTRA_INDEX_URL "https://oauth2accesstoken@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple"
+
+
+{{preInstallPluginfile}}
+
+RUN cat 
+
+RUN ls -al
+# Install uv
+RUN uv sync --keyring-provider subprocess --extra-index-url https://oauth2accesstoken@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple
+
+
+# Pull in the Dockerfile.plugin file here
+{{pluginfile}}
+
+# Eliminate the sensitive info from the final stage image
+#RUN rm -f ${NPM_CONFIG_USERCONFIG}
+
+# ENTRYPOINT [ "tini", "--" ]
+#WORKDIR /usr/src/app
+
+#COPY --chown=node:node --from=intermediate /usr/src/app /usr/src/app
+
+USER {{runuser}}
+COPY ./bashrc /home/{{runuser}}/.bashrc
+CMD [ "/bin/bash", "-c", "source /home/{{runuser}}/.bashrc && python scripts/server.py" ]