From d71f9631e08ecca4e7691431d085eb2158612e6f Mon Sep 17 00:00:00 2001
From: t0kubetsu <alexis.danjon@nc3.lu>
Date: Mon, 11 May 2026 12:52:50 +0200
Subject: [PATCH 1/2] feat(docker): migrate to Debian stable and add deployer
 CLI to builder stage
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Addresses #42. Replaces Alpine-based images with node:22-bookworm-slim
(builder) and nginx:stable-bookworm (runtime) to use a predictable,
Debian stable base without Ubuntu-specific constraints.

Installs range42-deployer CLI into an isolated Python venv in the builder
stage (PEP 668-compliant — Debian bookworm blocks system-level pip installs).
Adds DEPLOYER_CLI_VERSION build arg for optional version pinning.

Also adds healthcheck to docker-compose.yml and a Docker build/push
section to README.md.
---
 Dockerfile         | 26 +++++++++++++++++++++-----
 README.md          | 38 ++++++++++++++++++++++++++++++++++++++
 docker-compose.yml |  6 ++++++
 3 files changed, 65 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 02f0cd9..188c57b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,18 +1,34 @@
-# ---------- build stage ----------
-FROM node:22-alpine AS build
+# ---------- Stage 1: builder ----------
+FROM node:22-bookworm-slim AS builder
+
+# Optional: pin the range42-deployer CLI to a specific version (e.g. --build-arg DEPLOYER_CLI_VERSION=1.2.3)
+ARG DEPLOYER_CLI_VERSION
 
 WORKDIR /app
 
+# Install Python + venv toolchain (venv is required on Debian bookworm — PEP 668 blocks system-level pip installs)
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends python3 python3-pip python3-venv \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install the range42-deployer CLI into an isolated venv
+RUN python3 -m venv /opt/deployer-env \
+    && /opt/deployer-env/bin/pip install --no-cache-dir \
+       "range42-deployer${DEPLOYER_CLI_VERSION:+==${DEPLOYER_CLI_VERSION}}"
+
+ENV PATH="/opt/deployer-env/bin:${PATH}"
+
+# Install Node dependencies and build the production bundle
 COPY package.json package-lock.json* ./
 RUN npm ci
 
 COPY . .
 RUN npm run build
 
-# ---------- serve stage ----------
-FROM nginx:stable-alpine
+# ---------- Stage 2: runtime ----------
+FROM nginx:stable-bookworm AS runtime
 
-COPY --from=build /app/dist /usr/share/nginx/html
+COPY --from=builder /app/dist /usr/share/nginx/html
 COPY nginx/default.conf /etc/nginx/conf.d/default.conf
 
 EXPOSE 80
diff --git a/README.md b/README.md
index 6129638..7c9af83 100644
--- a/README.md
+++ b/README.md
@@ -93,6 +93,44 @@ The UI is available at `http://localhost:3000` (configurable via `UI_PORT` in `.
 
 Configure the backend API URL in the settings modal once the app is running.
 
+### Docker: Build & Push
+
+The multi-stage `Dockerfile` uses **Debian stable (bookworm)** for both the builder and runtime stages.
+Stage 1 installs the `range42-deployer` CLI into a Python venv before running the npm production build.
+Stage 2 serves the compiled SPA with nginx.
+
+**Build locally and validate:**
+
+```bash
+# Build and start (image tested via the /health endpoint)
+docker compose up --build
+
+# Confirm the container is healthy
+docker compose ps
+```
+
+**Build and tag for a registry:**
+
+```bash
+IMAGE=ghcr.io/range42/range42-deployer-ui
+TAG=$(git rev-parse --short HEAD)
+
+docker build -t "${IMAGE}:${TAG}" -t "${IMAGE}:latest" .
+```
+
+**Pin a specific deployer CLI version (optional):**
+
+```bash
+docker build --build-arg DEPLOYER_CLI_VERSION=1.2.3 -t "${IMAGE}:${TAG}" .
+```
+
+**Push to the registry:**
+
+```bash
+docker push "${IMAGE}:${TAG}"
+docker push "${IMAGE}:latest"
+```
+
 ### Development
 
 ```bash
diff --git a/docker-compose.yml b/docker-compose.yml
index e6196bc..2c4d165 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,3 +4,9 @@ services:
     ports:
       - "${UI_PORT:-3000}:80"
     restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost/health"]
+      interval: 30s
+      timeout: 3s
+      retries: 3
+      start_period: 5s

From 3c0409cc05aabdf37acc5a8d818facab09e2a86f Mon Sep 17 00:00:00 2001
From: t0kubetsu <alexis.danjon@nc3.lu>
Date: Mon, 11 May 2026 12:54:14 +0200
Subject: [PATCH 2/2] chore(docker): upgrade builder base to
 node:24-bookworm-slim

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 188c57b..ea27a14 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # ---------- Stage 1: builder ----------
-FROM node:22-bookworm-slim AS builder
+FROM node:24-bookworm-slim AS builder
 
 # Optional: pin the range42-deployer CLI to a specific version (e.g. --build-arg DEPLOYER_CLI_VERSION=1.2.3)
 ARG DEPLOYER_CLI_VERSION