Offline Python worker

Author: stephanos

dockerfiles/python.Dockerfile

@@ -1,12 +1,14 @@
 # Build in a full featured container
 ARG TARGETARCH
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:latest
+FROM --platform=linux/$TARGETARCH ${UV_IMAGE} AS uv
 FROM --platform=linux/$TARGETARCH python:3.11-bullseye AS build
 
 # Install protobuf compiler
 RUN apt-get update \
- && DEBIAN_FRONTEND=noninteractive \
+    && DEBIAN_FRONTEND=noninteractive \
     apt-get install --no-install-recommends --assume-yes \
-      protobuf-compiler=3.12.4-1+deb11u1 libprotobuf-dev=3.12.4-1+deb11u1
+    protobuf-compiler=3.12.4-1+deb11u1 libprotobuf-dev=3.12.4-1+deb11u1
 
 # Get go compiler
 ARG TARGETARCH
@@ -20,7 +22,7 @@ RUN wget -q -O - https://sh.rustup.rs | sh -s -- -y
 ENV PATH="$PATH:/root/.cargo/bin"
 
 # Install uv
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+COPY --from=uv /uv /uvx /bin/
 
 WORKDIR /app
 
@@ -46,12 +48,21 @@ COPY workers/python ./workers/python
 # Build the worker
 RUN CGO_ENABLED=0 ./temporal-omes prepare-worker --language python --dir-name prepared --version "$SDK_VERSION"
 
+# Download the worker dependencies
+WORKDIR /app/workers/python/prepared
+RUN uv lock \
+    && uv sync --frozen \
+    && . .venv/bin/activate && python -m compileall -q .
+
 # Copy the CLI and built worker to a distroless "run" container
 FROM --platform=linux/$TARGETARCH python:3.11-slim-bullseye
 
-COPY --from=build /bin/uv /bin/uv
+COPY --from=uv /uv /uvx /bin/
 COPY --from=build /app/temporal-omes /app/temporal-omes
 COPY --from=build /app/workers/python /app/workers/python
 
+ENV UV_OFFLINE=1 UV_FROZEN=1 UV_NO_SYNC=1 UV_ISOLATED=1 UV_PROJECT_ENVIRONMENT="/app/workers/python/prepared/.venv"
+ENV PATH="/app/workers/python/prepared/.venv/bin:${PATH}"
+
 # Put the language and dir, but let other options (like required scenario and run-id) be given by user
 ENTRYPOINT ["/app/temporal-omes", "run-worker", "--language", "python", "--dir-name", "prepared"]