mirror of
https://github.com/whyour/qinglong.git
synced 2026-11-07 19:19:53 +08:00
whyour
15d54866a8
Use MikroORM's official Node SQLite dialect with bounded database isolation, preserve legacy schema and data for rollback, and require Node 22.17 or newer. Update Debian runtimes and retain ARMv6 musl compatibility without a SQLite addon. Complete short archive writes, stop orphaned SQL workers after owner death, preserve buffered startup requests, and prestart the archived backend on every platform. Cover real package installation, migration, failure recovery, and legacy database compatibility. Keep authentication storage failures distinct from expired sessions with a pinned Keyv runtime, propagated cache errors, and retryable HTTP 503 responses. Preserve genuine 401 failures and verify legacy cache bytes, initialization safety, and session recovery.
135 lines
4.6 KiB
Docker
135 lines
4.6 KiB
Docker
FROM python:3.11.14-slim-bookworm AS nodebuilder
|
|
ARG TARGETARCH
|
|
ARG TARGETVARIANT
|
|
COPY docker/install-node-runtime.sh /tmp/install-node-runtime.sh
|
|
RUN apt-get update && apt-get install --no-install-recommends -y ca-certificates curl xz-utils libatomic1 libstdc++6 && \
|
|
sh /tmp/install-node-runtime.sh /usr/local
|
|
|
|
FROM python:3.11.14-slim-bookworm AS builder
|
|
COPY package.json .npmrc pnpm-lock.yaml /tmp/build/
|
|
COPY --from=nodebuilder /usr/local/bin/node /usr/local/bin/
|
|
COPY --from=nodebuilder /usr/local/lib/node_modules/. /usr/local/lib/node_modules/
|
|
RUN set -x && \
|
|
ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
|
|
apt-get update && \
|
|
apt-get install --no-install-recommends -y libatomic1 && \
|
|
npm i -g pnpm@8.3.1 && \
|
|
test "$(pnpm --version)" = "8.3.1" && \
|
|
cd /tmp/build && \
|
|
QL_BUILD_ONLY=1 pnpm install --prod --frozen-lockfile
|
|
|
|
FROM python:3.11.14-slim-bookworm
|
|
|
|
ARG QL_MAINTAINER="whyour"
|
|
LABEL maintainer="${QL_MAINTAINER}"
|
|
ARG QL_URL=https://github.com/${QL_MAINTAINER}/qinglong.git
|
|
ARG QL_BRANCH=develop
|
|
ARG PYTHON_SHORT_VERSION=3.11
|
|
|
|
ENV QL_DIR=/ql \
|
|
QL_BRANCH=${QL_BRANCH} \
|
|
QL_CONTAINER=true \
|
|
LANG=C.UTF-8 \
|
|
SHELL=/bin/bash \
|
|
PS1="\u@\h:\w \$ "
|
|
|
|
ARG QL_UID=5432
|
|
ARG QL_GID=5432
|
|
RUN groupadd -g ${QL_GID} qinglong && \
|
|
useradd -m -u ${QL_UID} -g ${QL_GID} -s /bin/bash qinglong && \
|
|
mkdir -p /home/qinglong/bin /home/qinglong/.ssh && \
|
|
chmod 700 /home/qinglong/.ssh && \
|
|
chown -R ${QL_UID}:${QL_GID} /home/qinglong && \
|
|
mkdir -p /etc/sudoers.d && \
|
|
echo 'qinglong ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/qinglong
|
|
|
|
ENV QL_USER=qinglong
|
|
ENV QL_HOME=/home/$QL_USER
|
|
|
|
COPY --from=nodebuilder /usr/local/bin/node /usr/local/bin/
|
|
COPY --from=nodebuilder /usr/local/lib/node_modules/. /usr/local/lib/node_modules/
|
|
|
|
RUN set -x && \
|
|
ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
|
|
ln -s /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx && \
|
|
apt-get update && \
|
|
apt-get upgrade -y && \
|
|
apt-get install --no-install-recommends -y git \
|
|
curl \
|
|
wget \
|
|
tzdata \
|
|
perl \
|
|
openssl \
|
|
openssh-client \
|
|
jq \
|
|
procps \
|
|
netcat-openbsd \
|
|
sudo \
|
|
unzip \
|
|
libatomic1 && \
|
|
apt-get clean && \
|
|
ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
|
|
echo "Asia/Shanghai" >/etc/timezone && \
|
|
git config --global user.email "qinglong@users.noreply.github.com" && \
|
|
git config --global user.name "qinglong" && \
|
|
git config --global http.postBuffer 524288000 && \
|
|
npm install -g pnpm@8.3.1 pm2 ts-node typescript@5 && \
|
|
test "$(pnpm --version)" = "8.3.1" && \
|
|
npm cache clean --force && \
|
|
rm -rf /root/.cache && \
|
|
rm -rf /root/.npm && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
rm -rf /etc/apt/apt.conf.d/docker-clean && \
|
|
ulimit -c 0
|
|
|
|
RUN mkdir -p ${QL_DIR} && \
|
|
chown -R ${QL_UID}:${QL_GID} ${QL_DIR}
|
|
|
|
USER qinglong
|
|
ARG SOURCE_COMMIT
|
|
LABEL org.opencontainers.image.revision=${SOURCE_COMMIT}
|
|
RUN git clone --depth=1 -b ${QL_BRANCH} ${QL_URL} ${QL_DIR} \
|
|
&& cd ${QL_DIR} \
|
|
&& if [ -n "${SOURCE_COMMIT}" ]; then git fetch --depth=1 origin "${SOURCE_COMMIT}" && git reset --hard FETCH_HEAD; fi \
|
|
&& cp -f .env.example .env \
|
|
&& chmod 777 ${QL_DIR}/shell/*.sh \
|
|
&& chmod 777 ${QL_DIR}/docker/*.sh
|
|
|
|
# Downloaded by CI from the build-static job in this workflow run.
|
|
COPY --chown=qinglong:qinglong static/ /ql/static/
|
|
COPY docker/verify-build.cjs docker/build-manifest.cjs /tmp/
|
|
COPY --from=builder /tmp/build/pnpm-lock.yaml /tmp/dependency-lock.yaml
|
|
RUN cd ${QL_DIR} && node /tmp/verify-build.cjs /tmp/dependency-lock.yaml
|
|
|
|
ENV PNPM_HOME=${QL_DIR}/data/dep_cache/node \
|
|
PYTHON_HOME=${QL_DIR}/data/dep_cache/python3 \
|
|
PYTHONUSERBASE=${QL_DIR}/data/dep_cache/python3 \
|
|
HOME=/home/qinglong
|
|
|
|
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:${PNPM_HOME}:${PYTHON_HOME}/bin:${HOME}/bin \
|
|
NODE_PATH=/usr/local/bin:/usr/local/lib/node_modules \
|
|
PIP_CACHE_DIR=${PYTHON_HOME}/pip \
|
|
PYTHONPATH=${PYTHON_HOME}:${PYTHON_HOME}/lib/python${PYTHON_SHORT_VERSION}:${PYTHON_HOME}/lib/python${PYTHON_SHORT_VERSION}/site-packages
|
|
|
|
RUN pip3 install --prefix ${PYTHON_HOME} requests
|
|
|
|
COPY --chown=qinglong:qinglong --from=builder /tmp/build/node_modules/. /ql/node_modules/
|
|
|
|
USER root
|
|
|
|
RUN ln -sf ${QL_DIR}/shell/task.sh /usr/local/bin/task \
|
|
&& ln -sf ${QL_DIR}/shell/update.sh /usr/local/bin/ql \
|
|
&& chmod +x /usr/local/bin/task /usr/local/bin/ql \
|
|
&& test "$(pnpm --version)" = "8.3.1"
|
|
|
|
WORKDIR ${QL_DIR}
|
|
|
|
HEALTHCHECK --interval=5s --timeout=2s --retries=20 \
|
|
CMD curl -sf --noproxy '*' http://localhost:${QlPort:-5700}/api/health || exit 1
|
|
|
|
ENTRYPOINT ["./docker/docker-entrypoint.sh"]
|
|
|
|
VOLUME /ql/data
|
|
|
|
EXPOSE 5700
|