[load-generator/recommendation]: replace alpine base image with distroless image

Signed-off-by: Gerard Vanloo <gerard.vanloo@ibm.com>

Author: Red-GV

CHANGELOG.md

@@ -11,6 +11,10 @@ the release.
   ([#2148](https://github.com/open-telemetry/opentelemetry-demo/pull/2148))
 * [product-catalog] Simplify span event name
   ([#2150](https://github.com/open-telemetry/opentelemetry-demo/pull/2150))
+* [load-generator] change image from alpine to distroless to reduce size
+  ([#2164](https://github.com/open-telemetry/opentelemetry-demo/pull/2164))
+* [recommendation] change image from alpine to distroless to reduce size
+  ([#2164](https://github.com/open-telemetry/opentelemetry-demo/pull/2164))
 
 ## 2.0.2
 

src/load-generator/Dockerfile

@@ -1,22 +1,27 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
+FROM python:3.12-slim-bookworm AS build-venv
 
-FROM python:3.12-slim-bookworm AS base
+ENV PLAYWRIGHT_BROWSERS_PATH=/opt/playwright
 
-FROM base AS builder
-RUN apt-get -qq update \
-    && apt-get install -y --no-install-recommends g++ \
-    && rm -rf /var/lib/apt/lists/*
+COPY ./src/load-generator/requirements.txt requirements.txt
 
-COPY ./src/load-generator/requirements.txt .
-RUN pip install --prefix="/reqs" -r requirements.txt
+RUN python -m venv venv
+RUN venv/bin/pip install --no-cache-dir -r requirements.txt
+
+RUN venv/bin/playwright install --with-deps chromium
+
+FROM gcr.io/distroless/python3-debian12:nonroot
 
-FROM base
-WORKDIR /usr/src/app/
-COPY --from=builder /reqs /usr/local
 ENV PLAYWRIGHT_BROWSERS_PATH=/opt/pw-browsers
-RUN playwright install --with-deps chromium
-COPY ./src/load-generator/locustfile.py .
-COPY ./src/load-generator/people.json .
-ENTRYPOINT ["locust", "--skip-log-setup"]
+
+COPY --from=build-venv /venv/ /venv/
+COPY --from=build-venv /opt/playwright/ /opt/pw-browsers/
+
+WORKDIR /app
+
+COPY ./src/load-generator/locustfile.py locustfile.py
+COPY ./src/load-generator/people.json people.json
+
+ENTRYPOINT ["/venv/bin/locust", "--skip-log-setup"]

src/recommendation/Dockerfile

@@ -2,31 +2,26 @@
 # SPDX-License-Identifier: Apache-2.0
 
 
-FROM python:3.12-slim-bookworm AS base
+FROM python:3.12-slim-bookworm AS build-venv
 
-#
-# Fetch requirements
-#
-FROM base AS builder
-RUN apt-get -qq update \
-    && apt-get install -y --no-install-recommends g++ \
-    && rm -rf /var/lib/apt/lists/*
+COPY ./src/recommendation/requirements.txt requirements.txt
 
-WORKDIR /usr/src/app/
-COPY ./src/recommendation/requirements.txt ./
+RUN python -m venv venv
+RUN venv/bin/pip install --no-cache-dir -r requirements.txt
 
-RUN pip install --upgrade pip
-RUN pip install --prefix="/reqs" -r requirements.txt
+RUN venv/bin/opentelemetry-bootstrap -a install
 
-#
-# Runtime
-#
-FROM base AS runtime
-WORKDIR /usr/src/app/
-COPY --from=builder /reqs /usr/local
-COPY ./src/recommendation/ ./
+FROM gcr.io/distroless/python3-debian12:nonroot
 
-RUN opentelemetry-bootstrap -a install
+COPY --from=build-venv /venv/ /venv/
+
+WORKDIR /app
+
+COPY ./src/recommendation/demo_pb2_grpc.py demo_pb2_grpc.py
+COPY ./src/recommendation/demo_pb2.py demo_pb2.py
+COPY ./src/recommendation/logger.py logger.py
+COPY ./src/recommendation/metrics.py metrics.py
+COPY ./src/recommendation/recommendation_server.py recommendation_server.py
 
 EXPOSE ${RECOMMENDATION_PORT}
-ENTRYPOINT [ "opentelemetry-instrument", "python", "recommendation_server.py" ]
+ENTRYPOINT [ "/venv/bin/opentelemetry-instrument", "/venv/bin/python", "recommendation_server.py" ]