Dockerfile

FROM alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a

HEALTHCHECK NONE

ENTRYPOINT []

ARG USER_NAME=default
ARG USER_HOME=/home/default
ARG USER_ID=1000
ARG USER_GECOS=Default

SHELL ["/bin/ash", "-euo", "pipefail", "-c"]

RUN apk upgrade --no-cache \
    && apk add --no-cache \
    audiofile=0.3.6-r3 \
    blind=1.1-r6 \
    coreutils=9.11-r0 \
    curl=8.23.0-r0 \
    darkice=1.6-r0 \
    ffmpeg=8.1.3-r0 \
    ffmpegthumbnailer=2.2.4-r0 \
    ffmpegthumbs=26.04.2-r0 \
    flac=1.4.3-r2 \
    git=2.54.0-r0 \
    mkvtoolnix=99.0-r1 \
    mlt=7.36.1-r1 \
    mp3splt=2.6.2-r1 \
    pipx=1.14.0-r0 \
    py3-pip=26.1.2-r0 \
    python3=3.14.10-r1 \
    pipewire=1.6.8-r4 \
    soundtouch=2.4.1-r0 \
    v4l-utils=1.32.0-r1 \
    wavpack=5.9.0-r0 \
    x265=4.1-r0 \
    && apk cache --no-cache clean \
    && rm -rf /var/cache/apk/*

COPY requirements.txt /tmp/requirements.txt

# Install each app from requirements.txt in its own venv, using the lines
# marked "constraint" as pip constraints to pin some of their dependencies.
RUN pipx ensurepath --global \
    && sed -n -e 's/#[[:space:]]*constraint[[:space:]]*$//p' /tmp/requirements.txt > /tmp/constraints.txt \
    && sed -e '/#[[:space:]]*constraint[[:space:]]*$/d' -e 's/#.*//' /tmp/requirements.txt \
    | xargs -n 1 pipx install --global --pip-args=--constraint=/tmp/constraints.txt \
    && rm -f /tmp/requirements.txt /tmp/constraints.txt

RUN adduser \
  --home "${USER_HOME}" \
  --uid "${USER_ID}" \
  --gecos "${USER_GECOS}" \
  --disabled-password \
  "${USER_NAME}"

USER "${USER_NAME}"

ENV HOME="${USER_HOME}"

WORKDIR "${HOME}"