refresh Dockerfile for better caching

Update the Dockerfile to better use caching by separating the prereq
building.

Also switch the server to uwsgi rather than using the Mojolicious
wrapper. It provided little benefit and caused numerous problems, and we
haven't been using it in production for a while.

Author: haarg

Dockerfile

@@ -1,24 +1,101 @@
-# hadolint ignore=DL3007
-FROM metacpan/metacpan-base:latest
-
-COPY cpanfile cpanfile.snapshot /metacpan-api/
-WORKDIR /metacpan-api
-
-# CPM installations of dependencies does not install or run tests. This is
-# because the modules themselves have been tested, and the metacpan use of the
-# modules is tested by the test suite. Removing the tests, reduces the overall
-# size of the images.
-RUN mkdir /CPAN \
-    && apt-get update \
-    && apt-get satisfy -y --no-install-recommends 'rsync (>= 3.2.3)' 'jq (>= 1.6)' \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/* \
-    && cpm install --global \
-    && git config --global --add safe.directory /metacpan-api \
-    && rm -fr /root/.cpanm /root/.perl-cpm /var/cache/apt/lists/* /tmp/*
+ARG SLIM_BUILD
+ARG MAYBE_BASE_BUILD=${SLIM_BUILD:+server-base-slim}
+ARG BASE_BUILD=${MAYBE_BASE_BUILD:-server-base}
+
+################### Web Server Base
+FROM metacpan/metacpan-base:main-20250531-090128 AS server-base
+FROM metacpan/metacpan-base:main-20250531-090129-slim AS server-base-slim
+
+################### CPAN Prereqs
+FROM server-base AS build-cpan-prereqs
+SHELL [ "/bin/bash", "-euo", "pipefail", "-c" ]
+
+WORKDIR /app/
+
+COPY cpanfile cpanfile.snapshot ./
+RUN \
+    --mount=type=cache,target=/root/.perl-cpm,sharing=private \
+<<EOT
+    cpm install --show-build-log-on-failure --resolver=snapshot
+EOT
+
+################### Web Server
+# false positive
+# hadolint ignore=DL3006
+FROM ${BASE_BUILD} AS server
+SHELL [ "/bin/bash", "-euo", "pipefail", "-c" ]
+
+WORKDIR /app/
+
+COPY app.psgi log4perl* metacpan_server.* metacpan_server_local.* ./
+COPY es es
+COPY bin bin
+COPY lib lib
+COPY root root
+
+COPY --from=build-cpan-prereqs /app/local local
+
+ENV PERL5LIB="/app/local/lib/perl5"
+ENV PATH="/app/local/bin:${PATH}"
+ENV METACPAN_SERVER_HOME=/app
 
 VOLUME /CPAN
 
-EXPOSE 5000
+USER metacpan
+
+CMD [ \
+    "/uwsgi.sh", \
+    "--http-socket", ":8000" \
+]
+
+EXPOSE 8000
+
+HEALTHCHECK --start-period=3s CMD [ "curl", "--fail", "http://localhost:8000/healthcheck" ]
+
+################### Development Server
+FROM server AS develop
+SHELL [ "/bin/bash", "-euo", "pipefail", "-c" ]
+
+ENV COLUMNS=120
+ENV PLACK_ENV=development
+
+USER root
+
+COPY cpanfile cpanfile.snapshot ./
+
+RUN \
+    --mount=type=cache,target=/root/.perl-cpm \
+<<EOT
+    cpm install --show-build-log-on-failure --resolver=snapshot --with-develop
+    chown -R metacpan:users ./
+EOT
+
+USER metacpan
+
+################### Test Runner
+FROM develop AS test
+SHELL [ "/bin/bash", "-euo", "pipefail", "-c" ]
+
+ENV PLACK_ENV=
+
+USER root
+
+RUN \
+    --mount=type=cache,target=/root/.perl-cpm \
+<<EOT
+    cpm install --show-build-log-on-failure --resolver=snapshot --with-test
+EOT
+
+COPY .perlcriticrc .perltidyrc perlimports.toml precious.toml .editorconfig metacpan_server_testing.* ./
+COPY t t
+COPY test-data test-data
+
+RUN chown metacpan t/var
+
+USER metacpan
+CMD [ "prove", "-l", "-r", "-j", "2", "t" ]
+
+################### Production Server
+FROM server AS production
 
-CMD [ "/wait-for-it.sh", "${PGDB}",  "--", "${API_SERVER}", "./bin/api.pl" ]
+USER metacpan

docker-compose.yml

@@ -0,0 +1,17 @@
+services:
+  api-server:
+    build:
+      context: .
+      target: develop
+    volumes:
+      - './:/app/'
+      - '/app/local'
+    ports:
+      - '8001:8000'
+    environment:
+      # default is 120, shorten to work with compose label
+      COLUMNS: 96
+    develop:
+      watch:
+        - path: ./cpanfile
+          action: rebuild