nathan/nexus-mcp
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix(docker): modernize PowerShell repo install

Browse Source 
Replace deprecated apt-key flow in nexus-mcp/Dockerfile with a Debian 12 signed-by keyring source and add ca-certificates for reliable package trust.
Harden container startup (including PYTHONUNBUFFERED and pwsh compatibility) to keep the environment stable while the session plan advances toward post-consent Entra
This commit is contained in:
Nathan Castaldi 2026-04-16 10:30:31 -04:00
parent 8a4b8b395f
commit 92f0ebb7f1
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
nexus-mcp/Dockerfile
View File

@ -1,20 +1,23 @@
# Use official Python image
FROM python:3.11-slim
# 1. Install System Deps & PowerShell
# Explicitly linking the keyring to the source list to satisfy Debian Trixie security
RUN apt-get update && apt-get install -y \
curl gnupg apt-transport-https \
&& curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - \
&& curl https://packages.microsoft.com/config/debian/11/prod.list > /etc/apt/sources.list.d/microsoft.list \
curl gnupg apt-transport-https ca-certificates \
&& curl -fSsL https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor | tee /usr/share/keyrings/microsoft-prod.gpg > /dev/null \
&& echo "deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft-prod.gpg] https://packages.microsoft.com/debian/12/prod bookworm main" > /etc/apt/sources.list.d/microsoft.list \
&& apt-get update && apt-get install -y powershell \
&& apt-get clean && rm -rf /var/lib/apt/lists/*
# Create a symlink so 'powershell' command works in Linux
RUN ln -s /usr/bin/pwsh /usr/bin/powershell
WORKDIR /app
# 2. Use pyproject.toml to install dependencies
# We copy the pyproject.toml first to cache the 'pip install' layer
COPY pyproject.toml .
# Create a dummy src dir so pip doesn't complain during the install
# Create dummy src so pip doesn't complain during the install
RUN mkdir src && pip install .
# 3. Copy the actual source code
@ -23,5 +26,5 @@ COPY lib/ ./lib/
# 4. Runtime Config
ENV PYTHONPATH="/app/src:/app"
# This matches the [project.scripts] entry in your toml
ENV PYTHONUNBUFFERED=1
CMD ["python", "src/main.py"]