I'm running into an issue while executing a package goal inside a Docker container where the symlink for the generated virtualenv is not resolveable during the packaging step.

hm, interesting! pants should only try to resolve a symlink when it is located inside of your Pants workspace… the

.cache

directory is supposed to be located in your home directory

@witty-crayon-22786 was spot on here, @limited-insurance-37393 I got it working with this little patch:

$ docker build -t ol-infra .
[+] Building 104.9s (16/16) FINISHED                                                                                                                                                     
 => [internal] load build definition from Dockerfile                                                                                                                                0.0s
 => => transferring dockerfile: 602B                                                                                                                                                0.0s
 => [internal] load .dockerignore                                                                                                                                                   0.0s
 => => transferring context: 2B                                                                                                                                                     0.0s
 => [internal] load metadata for <http://docker.io/library/python:3.9-slim|docker.io/library/python:3.9-slim>                                                                                                                  1.1s
 => [auth] library/python:pull token for <http://registry-1.docker.io|registry-1.docker.io>                                                                                                                       0.0s
 => [stage-1 1/4] FROM <http://docker.io/library/python:3.9-slim@sha256:e3c1da82791d701339381d90ae63843cf078fed94bae6f36f7abe3ed3e339218|docker.io/library/python:3.9-slim@sha256:e3c1da82791d701339381d90ae63843cf078fed94bae6f36f7abe3ed3e339218>                                                    0.0s
 => [internal] load build context                                                                                                                                                   0.1s
 => => transferring context: 133.20kB                                                                                                                                               0.1s
 => CACHED [build 2/7] RUN apt-get update && apt-get install -q -y curl                                                                                                             0.0s
 => CACHED [build 3/7] RUN useradd -m app                                                                                                                                           0.0s
 => [build 4/7] WORKDIR /home/app/workspace                                                                                                                                         0.0s
 => CACHED [stage-1 2/4] RUN useradd -m app                                                                                                                                         0.0s
 => CACHED [stage-1 3/4] WORKDIR /home/app                                                                                                                                          0.0s
 => [build 5/7] RUN pip install --no-cache-dir poetry && poetry config virtualenvs.in-project true                                                                                  9.6s
 => [build 6/7] COPY ./ /home/app/workspace                                                                                                                                         0.3s
 => [build 7/7] RUN poetry install --no-dev && ./pants --no-local-cache package src/bridge:bridge-package && .venv/bin/pip install dist/bridge-*.whl                               86.3s 
 => [stage-1 4/4] COPY --from=build /home/app/workspace/.venv/ .venv                                                                                                                2.7s 
 => exporting to image                                                                                                                                                              2.9s 
 => => exporting layers                                                                                                                                                             2.8s 
 => => writing image sha256:302e9afeef0f5617dcaeb3257d9ff53471d2eec39c3d01d92f8afb418569daa9                                                                                        0.0s 
 => => naming to <http://docker.io/library/ol-infra|docker.io/library/ol-infra>                                                                                                                                         0.0s 
                                                                                                                                                                                         
Use 'docker scan' to run Snyk tests against images to find vulnerabilities and learn how to fix them
$ git diff
diff --git a/Dockerfile b/Dockerfile
index b6d48a2..b52debd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,14 +2,14 @@ FROM python:3.9-slim as build
 RUN apt-get update && apt-get install -q -y curl
 RUN useradd -m app
 USER app
-WORKDIR /home/app
+WORKDIR /home/app/workspace
 ENV PATH /bin:/usr/bin/:/usr/local/bin:/home/app/.local/bin
 RUN pip install --no-cache-dir poetry && poetry config virtualenvs.in-project true
-COPY ./ .
+COPY ./ /home/app/workspace
 RUN poetry install --no-dev && ./pants --no-local-cache package src/bridge:bridge-package && .venv/bin/pip install dist/bridge-*.whl
 
 FROM python:3.9-slim
 RUN useradd -m app
 USER app
 WORKDIR /home/app
-COPY --from=build /home/app/.venv/ .venv
+COPY --from=build /home/app/workspace/.venv/ .venv

Awesome, thanks!