Skip to content

Docker Deployment

Docker is the recommended way to run The Data Packet in production. The image includes all system dependencies (including ffmpeg) and runs as a non-root user.

Quick run

docker run --rm \
  --env-file .env \
  -v "$(pwd)/output:/app/output" \
  -v "$(pwd)/service-account-key.json:/credentials.json:ro" \
  ghcr.io/thewintershadow/the-data-packet:latest

Image tags

Tag Description
latest Latest stable release
v2.0.0 Specific version pin
main Latest commit on main
sha-abc1234 Specific commit SHA

Platforms: linux/amd64 · linux/arm64

Output directory permissions

Required before first run

The container runs as UID 1000 (user app). The host output directory must be writable by that user:

mkdir -p output
sudo chown -R 1000:1000 output

Or world-writable (less secure): 

chmod 777 output

Environment file

cp .env.template .env
# Edit .env with your keys

Minimum .env:

ANTHROPIC_API_KEY=sk-ant-api03-your-key-here
GCS_BUCKET_NAME=your-gcs-bucket
GOOGLE_APPLICATION_CREDENTIALS=/credentials.json

Common usage

docker run --rm --env-file .env \
  -v "$(pwd)/output:/app/output" \
  -v "$(pwd)/key.json:/credentials.json:ro" \
  ghcr.io/thewintershadow/the-data-packet:latest

docker run --rm --env-file .env \
  -v "$(pwd)/output:/app/output" \
  -v "$(pwd)/key.json:/credentials.json:ro" \
  ghcr.io/thewintershadow/the-data-packet:latest \
  --script-only

docker run --rm --env-file .env \
  -v "$(pwd)/output:/app/output" \
  -v "$(pwd)/key.json:/credentials.json:ro" \
  ghcr.io/thewintershadow/the-data-packet:latest \
  --show-name "Daily Security Brief" \
  --sources wired techcrunch \
  --categories security \
  --max-articles 2

docker run --rm --env-file .env \
  -v "$(pwd)/output:/app/output" \
  -v "$(pwd)/key.json:/credentials.json:ro" \
  ghcr.io/thewintershadow/the-data-packet:latest \
  --log-level DEBUG \
  --save-intermediate

Docker Compose

docker-compose.yml
services:
  podcast-generator:
    image: ghcr.io/thewintershadow/the-data-packet:latest
    env_file: .env
    volumes:
      - ./output:/app/output
      - ./service-account-key.json:/credentials.json:ro
    command:
      - --show-name
      - "Tech Brief Daily"
      - --sources
      - wired
      - techcrunch
docker-compose.yml
services:
  mongodb:
    image: mongo:7
    environment:
      MONGO_INITDB_ROOT_USERNAME: admin
      MONGO_INITDB_ROOT_PASSWORD: ${MONGODB_PASSWORD}
    volumes:
      - mongo-data:/data/db

  podcast-generator:
    image: ghcr.io/thewintershadow/the-data-packet:latest
    env_file: .env
    depends_on:
      - mongodb
    volumes:
      - ./output:/app/output
      - ./service-account-key.json:/credentials.json:ro

volumes:
  mongo-data:

Building from source

git clone https://github.com/TheWinterShadow/The-Data-Packet.git
cd The-Data-Packet

# Single platform
docker build -t the-data-packet:local .

# Multi-platform push
docker buildx create --name multiplatform --bootstrap --use
docker buildx build \
  --platform linux/amd64,linux/arm64 \
  -t the-data-packet:latest \
  --push .

Security hardening

The image is already production-hardened:

  • Runs as non-root (app, UID 1000)
  • python:3.11-slim minimal base image
  • No hardcoded secrets
  • Read-only credential mount

Additional production flags:

docker run --rm \
  --read-only \
  --user "1000:1000" \
  --tmpfs /tmp:rw,noexec,nosuid,size=100m \
  --env-file .env \
  -v "$(pwd)/output:/app/output:Z" \
  -v "$(pwd)/key.json:/credentials.json:ro" \
  ghcr.io/thewintershadow/the-data-packet:latest

Monitoring

# Live logs
docker logs -f podcast-generator

# Resource usage
docker stats podcast-generator

# Health check
docker inspect --format='{{.State.Health.Status}}' podcast-generator

Troubleshooting

ARM64 exec format error

exec /usr/local/bin/python: exec format error

Pull explicitly for your platform: 

docker pull --platform linux/arm64 \
  ghcr.io/thewintershadow/the-data-packet:latest

Permission denied on output

sudo chown -R 1000:1000 output

Container exits immediately

Check what error the container emits: 

docker run --rm --env-file .env \
  ghcr.io/thewintershadow/the-data-packet:latest --help