add python base image

Author: aplr

.github/workflows/build_lean.yml

@@ -24,7 +24,7 @@ jobs:
     name: Build and Push Docker Image
     runs-on: ubuntu-latest
     concurrency:
-      group: ${{ github.ref }}-lean-${{ matrix.lean_version}}
+      group: ${{ github.ref }}-lean-${{ matrix.lean_version }}
       cancel-in-progress: ${{ github.event_name == 'pull_request' || github.ref_name != github.event.repository.default_branch }}
     strategy:
       matrix:

.github/workflows/build_python.yml

@@ -0,0 +1,87 @@
+name: Build Scratch Image
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "python/**"
+  pull_request:
+    paths:
+      - "python/**"
+  workflow_dispatch:
+    inputs:
+      no-cache:
+        description: "Disable cache for build"
+        required: false
+        default: false
+        type: boolean
+  repository_dispatch:
+    types: [trigger-build]
+
+jobs:
+  build:
+    name: Build and Push Docker Image
+    runs-on: ubuntu-latest
+    concurrency:
+      group: ${{ github.ref }}-python-${{ matrix.python_version }}
+      cancel-in-progress: ${{ github.event_name == 'pull_request' || github.ref_name != github.event.repository.default_branch }}
+    strategy:
+      matrix:
+        python_version: [3.9, 3.10, 3.11, 3.12]
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up QEMU
+        if: github.ref_name == github.event.repository.default_branch
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx (QEMU)
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Github Packages
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          flavor: |
+            suffix=-${{ matrix.python_version }}
+          tags: |
+            type=schedule
+            type=ref,event=branch
+            type=ref,event=tag
+            type=ref,event=pr
+            type=raw,value=${{ matrix.python_version }},suffix=,enable={{is_default_branch}}
+            type=raw,value=latest,suffix=,enable=${{ github.ref_name == github.event.repository.default_branch && matrix.python_version == '3.12' }}
+            type=edge,branch=main
+          images: |
+            ghcr.io/${{ github.repository }}/python
+
+      - name: Build and push
+        uses: docker/build-push-action@v4
+        with:
+          context: python
+          pull: true
+          push: ${{ !(github.event_name == 'push' && github.ref_name != github.event.repository.default_branch) }}
+          platforms: ${{ (github.ref_type == 'tag' || github.ref_name == github.event.repository.default_branch) && 'linux/amd64,linux/arm64' || 'linux/amd64' }}
+          provenance: false
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          no-cache: ${{ inputs.no-cache || false }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max,ignore-error=true
+          build-args: |
+            PYTHON_VERSION=${{ matrix.python_version }}

python/Dockerfile

@@ -0,0 +1,42 @@
+ARG DEBIAN_VERSION=bookworm
+ARG SHIMMY_VERSION=latest
+ARG PYTHON_VERSION=3.11
+
+FROM ghcr.io/lambda-feedback/shimmy:${SHIMMY_VERSION} as shimmy
+
+FROM python:${PYTHON_VERSION}-slim-${DEBIAN_VERSION} as base
+
+# set common workdir
+WORKDIR /app
+
+FROM base as lambda-rie
+
+# Install curl
+RUN apt-get update && apt-get install -y \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install the AWS Lambda Runtime Interface Emulator
+RUN case $(uname -m) in \
+    "aarch64") export RIE_BINARY_NAME="aws-lambda-rie-arm64" ;; \
+    *) export RIE_BINARY_NAME="aws-lambda-rie" ;; \
+    esac && \
+    curl -Lo /usr/local/bin/aws-lambda-rie https://github.com/aws/aws-lambda-runtime-interface-emulator/releases/latest/download/${RIE_BINARY_NAME} && \
+    chmod +x /usr/local/bin/aws-lambda-rie
+
+FROM base
+
+ENV LOG_FORMAT="production"
+
+# add shimmy
+COPY --from=shimmy /shimmy /usr/local/bin/shimmy
+
+# add aws-lambda-rie
+COPY --from=lambda-rie /usr/local/bin/aws-lambda-rie /usr/local/bin/aws-lambda-rie
+
+# Copy the entrypoint script
+COPY ./entrypoint.sh /entrypoint.sh
+
+ENTRYPOINT [ "/entrypoint.sh" ]
+
+CMD [ "shimmy" ]

python/README.md

@@ -0,0 +1,17 @@
+# Python Evaluation Function Base Image
+
+This is a minimal base image which can be used by evaluation functions written in [Python](https://www.python.org/). It is based on the [`python:3.10-slim`](https://hub.docker.com/_/python) image and adds the necessary components to run evaluation functions written in Python.
+
+## Usage
+
+This image is not meant to be run directly. Instead, it ought to be used as a base image for evaluation functions written in Python. The evaluation function should be placed in the `/app` directory.
+
+Here is an example of a `Dockerfile` that uses this image as a base:
+
+```Dockerfile
+FROM ghcr.io/lambda-feedback/evaluation-function-base/python:latest
+
+COPY evaluation_function.py /app/evaluation_function.py
+
+CMD ["shimmy", "-c", "python", "-a", "-m", "evaluation_function"]
+```

python/entrypoint.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+# Exit immediately if a command exits with a non-zero status.
+set -e
+
+# Prevent errors in a pipeline from being masked.
+set -o pipefail
+
+# start the aws lambda RIE if AWS_LAMBDA_RIE is set, and AWS_LAMBDA_RUNTIME_API is not
+if [ -z "${AWS_LAMBDA_RUNTIME_API}" ] && [ -n "${AWS_LAMBDA_RIE}" ]; then
+  exec aws-lambda-rie "$@"
+else
+  exec "$@"
+fi

scratch/README.md

@@ -4,7 +4,7 @@ This is a minimal base image which can be used with arbitrary evaluation functio
 
 ## Usage
 
-This image is not meant to be run directly. Instead, it ought to be used as a base image for evaluation functions written in Wolfram Language. The evaluation function should be placed in the `/app` directory.
+This image is not meant to be run directly. Instead, it ought to be used as a base image for arbitrary evaluation functions. The evaluation function should be placed in the `/app` directory.
 
 Here is an example of a `Dockerfile` that uses this image as a base: