mirror of
https://github.com/tiennm99/litellm.git
synced 2026-07-17 20:18:10 +00:00
Yuneng Jiang
a29e2eea62
- Dockerfile.health_check: HEALTHCHECK now verifies the script is intact instead of unconditionally exiting 0 - secureStorage.ts: replace deprecated escape/unescape with encodeURIComponent/decodeURIComponent; don't delete legacy values on decode failure so in-flight flows can time out naturally - OAuth callback: add same-origin check before redirecting to stored return URL
31 lines
1.3 KiB
Docker
31 lines
1.3 KiB
Docker
ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
|
|
FROM $UV_IMAGE AS uvbin
|
|
|
|
FROM python:3.13-slim@sha256:739e7213785e88c0f702dcdc12c0973afcbd606dbf021a589cab77d6b00b579d
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy the uv binary and the health check script.
|
|
COPY --from=uvbin /uv /usr/local/bin/uv
|
|
COPY pyproject.toml uv.lock /app/
|
|
COPY scripts/health_check/health_check_client.py /app/health_check_client.py
|
|
|
|
# Resolve and install the health-check dependencies from the project lockfile
|
|
# so the runtime image stays self-contained and reproducible.
|
|
RUN uv export --frozen --no-default-groups --only-group healthcheck --no-emit-project --no-hashes --output-file /tmp/health-check-requirements.txt \
|
|
&& uv pip install --system -r /tmp/health-check-requirements.txt \
|
|
&& rm /tmp/health-check-requirements.txt \
|
|
&& rm /app/pyproject.toml /app/uv.lock \
|
|
&& chmod +x /app/health_check_client.py
|
|
|
|
# Run as non-root user
|
|
RUN groupadd --gid 1000 appuser && useradd --uid 1000 --gid 1000 --no-create-home appuser
|
|
USER appuser
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
|
|
CMD ["python", "/app/health_check_client.py", "--help"]
|
|
|
|
# Set entrypoint
|
|
ENTRYPOINT ["python", "/app/health_check_client.py"]
|