optimize docker build process

Author: irvingpop

.dockerignore

@@ -1,33 +1,56 @@
-*.env
-git/
+# Git
+.git
+.github
+.gitignore
 
-build
-dist
+# Python
+.venv
+venv
+__pycache__
+*.pyc
+*.pyo
+*.pyd
+.Python
+*.so
+*.egg
 *.egg-info
-*.egg/
+dist
+build
+.pytest_cache
+.coverage
+htmlcov
+.tox
+.mypy_cache
+.ruff_cache
+
+# Environment files
+.env
+.env.*
+!.env.example
+
+# IDE
+.vscode
+.idea
 *.swp
+*.swo
+*~
 
-.tox
-.coverage
-html/*
-**/__pycache__
-**/*.pyc
-
-# Development files - should not be in production
-.dev/
-src/.dev/
-src/.dev
-**/.dev/
-**/.dev
-*.sqlite3
-*.db
-db.sqlite3
-src/db.sqlite3
-**/db.sqlite3
-
-# Test artifacts
-.pytest_cache/
-src/.pytest_cache/
-**/.pytest_cache/
-.coverage
-htmlcov/
+# Logs
+*.log
+
+# Documentation
+*.md
+!README.md
+docs/
+
+# Testing
+tests/
+*.test
+
+# macOS
+.DS_Store
+
+# Temporary files
+tmp/
+temp/
+*.tmp

.github/workflows/ci.yml

@@ -172,7 +172,7 @@ jobs:
 
   docker-build-push:
     name: Build and Push Docker Image
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm64
     # Run on push to main (build+push) and on PRs (build only)
     if: github.event_name == 'push' || github.event_name == 'pull_request'
     # For main/PR, wait for CI checks to pass
@@ -260,7 +260,7 @@ jobs:
         uses: aws-actions/amazon-ecr-login@v2
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           target: runtime
@@ -269,8 +269,14 @@ jobs:
           tags: |
             ${{ steps.docker-tag.outputs.image }}
           provenance: false
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          cache-from: |
+            type=gha,scope=arm64-${{ github.head_ref || github.ref_name }}
+            type=gha,scope=arm64-main
+            type=registry,ref=633607774026.dkr.ecr.us-east-2.amazonaws.com/back-end-cache:${{ github.head_ref || github.ref_name }}
+            type=registry,ref=633607774026.dkr.ecr.us-east-2.amazonaws.com/back-end-cache:main
+          cache-to: |
+            type=gha,mode=max,scope=arm64-${{ github.head_ref || github.ref_name }}
+            type=registry,ref=633607774026.dkr.ecr.us-east-2.amazonaws.com/back-end-cache:${{ github.head_ref || github.ref_name }},mode=max
 
       - name: Output image URI
         if: steps.can-push.outputs.push == 'true'

Dockerfile

@@ -6,11 +6,13 @@
 FROM python:3.12-slim AS builder
 
 # Install build dependencies required for compiling Python packages
-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    rm -f /etc/apt/apt.conf.d/docker-clean && \
+    apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
     libpq-dev \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
+    curl
 
 # Install Poetry
 ENV POETRY_VERSION=2.3.0 \
@@ -20,7 +22,8 @@ ENV POETRY_VERSION=2.3.0 \
     POETRY_VIRTUALENVS_CREATE=1 \
     POETRY_CACHE_DIR=/tmp/poetry_cache
 
-RUN curl -sSL https://install.python-poetry.org | python3 - && \
+RUN --mount=type=cache,target=/root/.cache \
+    curl -sSL https://install.python-poetry.org | python3 - && \
     ln -s /opt/poetry/bin/poetry /usr/local/bin/poetry
 
 WORKDIR /app
@@ -52,13 +55,14 @@ LABEL org.opencontainers.image.description="Operation Code Backend - Development
 LABEL org.opencontainers.image.licenses="MIT"
 
 # Install runtime dependencies
-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    rm -f /etc/apt/apt.conf.d/docker-clean && \
+    apt-get update && apt-get install -y --no-install-recommends \
     libpq5 \
     curl \
     wget \
-    && apt-get upgrade -y \
-    && rm -rf /var/lib/apt/lists/* \
-    && apt-get clean
+    && apt-get upgrade -y
 
 # Create non-root user for security
 RUN groupadd -r appuser && \
@@ -100,13 +104,14 @@ LABEL org.opencontainers.image.description="Operation Code Backend - Django API"
 LABEL org.opencontainers.image.licenses="MIT"
 
 # Install only runtime dependencies (no build tools)
-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    rm -f /etc/apt/apt.conf.d/docker-clean && \
+    apt-get update && apt-get install -y --no-install-recommends \
     libpq5 \
     curl \
     wget \
-    && apt-get upgrade -y \
-    && rm -rf /var/lib/apt/lists/* \
-    && apt-get clean
+    && apt-get upgrade -y
 
 # Create non-root user for security
 RUN groupadd -r appuser && \