Initial Merge to Main

.gitignore

@@ -0,0 +1,16 @@
+.venv/
+.vscode
+**.log
+__pycache__
+config*.yaml
+!**config.example.yaml
+cert*.yaml
+**/*.egg-info
+report.*
+!report.example.*
+**.pem
+**.pytest_cache**
+**.tox**
+
+
+s2-self-cert-server/data

.gitmodules

@@ -0,0 +1,4 @@
+[submodule "packages/s2-python"]
+	path = packages/s2-python
+	url = git@github.com:AndrewRutherfoord/s2-python.git
+	branch = add_pebc_validation

.pylintrc

@@ -0,0 +1,7 @@
+[Main]
+# Use multiple processes to speed up Pylint. Specifying 0 will auto-detect the
+# number of processors available to use, and will cap the count on Windows to
+# avoid hangs.
+jobs=1
+
+disable=missing-class-docstring,missing-module-docstring,too-few-public-methods,missing-function-docstring,no-member,unsubscriptable-object,line-too-long

.python-version

@@ -0,0 +1 @@
+3.10

Dockerfile.client

@@ -0,0 +1,39 @@
+# Use a Python image with uv pre-installed
+FROM ghcr.io/astral-sh/uv:python3.11-bookworm-slim
+
+# Install the project into `/app`
+WORKDIR /app
+
+# Enable bytecode compilation
+ENV UV_COMPILE_BYTECODE=1
+
+# Copy from the cache instead of linking since it's a mounted volume
+ENV UV_LINK_MODE=copy
+
+COPY s2-self-cert/pyproject.toml .
+COPY s2-self-cert/uv.lock .
+
+# Install the project's dependencies using the lockfile and settings
+COPY packages /packages
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --locked --no-install-project
+
+
+COPY s2-self-cert /app
+
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync
+
+# Place executables in the environment at the front of the path
+ENV PATH="/app/.venv/bin:$PATH"
+RUN whoami
+ENV PYTHONPATH="/app/src"
+
+# Change ownership and permissions of config.yaml
+RUN chown -R root:root /app/
+RUN chmod -R 755 /app/
+
+# Reset the entrypoint, don't invoke `uv`
+ENTRYPOINT []
+
+CMD ["python3", "/app/src/s2selfcert/main.py"]

Dockerfile.server

@@ -0,0 +1,38 @@
+# Use a Python image with uv pre-installed
+FROM ghcr.io/astral-sh/uv:python3.11-bookworm-slim AS server
+
+# Install the project into `/app`
+WORKDIR /app
+
+# Enable bytecode compilation
+ENV UV_COMPILE_BYTECODE=1
+
+# Copy from the cache instead of linking since it's a mounted volume
+ENV UV_LINK_MODE=copy
+
+COPY s2-self-cert-server/pyproject.toml .
+COPY s2-self-cert-server/uv.lock .
+
+# Install the project's dependencies using the lockfile and settings
+COPY packages /packages
+RUN --mount=type=cache,target=/root/.cache/uv \
+uv sync --locked --no-install-project
+
+
+COPY s2-self-cert-server /app
+
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync
+
+# Place executables in the environment at the front of the path
+ENV PATH="/app/.venv/bin:$PATH"
+RUN whoami
+
+# Change ownership and permissions of config.yaml
+RUN chown -R root:root /app/
+RUN chmod -R 755 /app/
+
+# Reset the entrypoint, don't invoke `uv`
+ENTRYPOINT []
+
+CMD ["fastapi", "run", "/app/src/main.py", "--host", "0.0.0.0", "--port", "8001"]