Athena issue

[Nahuel990]

Hello based on the issue #411 I discovered there is a silent error in Athena... We could support it if we change to a Debian image, we could switch to a ministackorg/ministack:full that will get the image... so we keep latest and full with Debian and we could add some other servcies there like Bedrock + etc etc... the change for Debian implies a 366Mb total size, increase dependencies surface (we could do a multistage to remove a lot of unnecesary dependencies) but it gives us room to add several other services. We are currently sitting at 170Mb aprox.

[Nahuel990]

FROM python:3.12-slim AS builder

RUN pip install --no-cache-dir --no-compile
hypercorn==0.18.0
"cbor2>=5.4.0"
"defusedxml>=0.7"
"docker>=7.0.0"
"pyyaml>=6.0"
"cryptography>=41.0"
"pymysql>=1.1"
"psycopg2-binary>=2.9"
"duckdb>=0.10.0"
"boto3>=1.34"
"awscli"

RUN rm -rf /usr/local/lib/python3.12/site-packages/awscli/examples
&& find /usr/local/lib/python3.12/site-packages -type d -name 'pycache' -exec rm -rf {} + 2>/dev/null
&& rm -rf /usr/local/lib/python3.12/site-packages/pip*.dist-info
&& rm -rf /usr/local/lib/python3.12/site-packages/pip*
&& rm -rf /usr/local/lib/python3.12/site-packages/_duckdb-stubs
&& rm -rf /usr/local/lib/python3.12/site-packages/adbc_driver_duckdb

FROM python:3.12-slim

LABEL maintainer="MiniStack"
description="Local AWS Service Emulator — full variant with DuckDB (Athena), PostgreSQL, and MySQL drivers"

RUN apt-get update
&& apt-get install -y --no-install-recommends nodejs bash
&& apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false
&& rm -rf /var/lib/apt/lists/* /var/cache/apt/* /tmp/*
&& rm -rf /usr/local/lib/python3.12/site-packages/pip* /usr/local/bin/pip*
&& rm -rf /usr/share/doc /usr/share/man /usr/share/info /usr/share/locale

WORKDIR /opt/ministack

COPY --from=builder /usr/local/lib/python3.12/site-packages /usr/local/lib/python3.12/site-packages
COPY --from=builder /usr/local/bin/aws /usr/local/bin/aws
COPY --from=builder /usr/local/bin/aws_completer /usr/local/bin/aws_completer
COPY --from=builder /usr/local/bin/hypercorn /usr/local/bin/hypercorn

COPY bin/awslocal /usr/local/bin/awslocal
RUN chmod +x /usr/local/bin/awslocal

COPY ministack/ ministack/

RUN groupadd -r ministack && useradd -r -g ministack ministack
RUN mkdir -p /tmp/ministack-data/s3 && chown -R ministack:ministack /tmp/ministack-data
RUN mkdir -p /docker-entrypoint-initaws.d/ready.d
/etc/localstack/init/boot.d
/etc/localstack/init/ready.d &&
chown -R ministack:ministack /docker-entrypoint-initaws.d /etc/localstack
VOLUME /docker-entrypoint-initaws.d
VOLUME /etc/localstack/init

ENV GATEWAY_PORT=4566
LOG_LEVEL=INFO
S3_PERSIST=0
S3_DATA_DIR=/tmp/ministack-data/s3
REDIS_HOST=redis
REDIS_PORT=6379
RDS_BASE_PORT=15432
RDS_PERSIST=0
ELASTICACHE_BASE_PORT=16379
LAMBDA_EXECUTOR=local
PYTHONUNBUFFERED=1

EXPOSE 4566

HEALTHCHECK --interval=10s --timeout=3s --start-period=5s --retries=3
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:4566/_ministack/health')" || exit 1

ENTRYPOINT ["python", "-m", "hypercorn", "ministack.app:app", "--bind", "0.0.0.0:4566", "--keep-alive", "75"]

[jgrumboe]

I would be fine with Debian slim. We're using it in my department also across production, mostly because alpine sometimes has some quirks with DNS resolution and musl library.

We can also try using https://github.com/slimtoolkit/slim to trim our image at the end.