tbphp
aa558e2ee2
* fix(docker): include modern route metadata and git * fix(docker): remove unneeded builder git
82 lines
3.1 KiB
Docker
82 lines
3.1 KiB
Docker
FROM --platform=$BUILDPLATFORM node:24.18.0-alpine3.24@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd AS web-builder
|
|
|
|
WORKDIR /build
|
|
RUN corepack enable \
|
|
&& corepack install --global pnpm@11.17.0
|
|
|
|
COPY web/package.json web/pnpm-lock.yaml web/pnpm-workspace.yaml ./web/
|
|
RUN pnpm --dir web install --frozen-lockfile
|
|
|
|
COPY internal/webui/page_routes.json internal/webui/modern_page_routes.json ./internal/webui/
|
|
COPY web ./web
|
|
RUN pnpm --dir web run build
|
|
|
|
|
|
FROM --platform=$BUILDPLATFORM golang:1.27.0-alpine3.24@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc AS go-builder
|
|
|
|
ARG VERSION=2.0.0-dev
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
# GOPROXY 使用竖线分隔：任何错误（含网络错误）都回退到下一个源。
|
|
# 默认的逗号只在 404/410 时回退，模块代理瞬时故障会直接中断构建。
|
|
ENV GO111MODULE=on \
|
|
CGO_ENABLED=0 \
|
|
GOPROXY="https://proxy.golang.org|direct"
|
|
|
|
WORKDIR /build
|
|
|
|
COPY go.mod go.sum ./
|
|
COPY third_party/cpaembedded/go.mod third_party/cpaembedded/go.sum ./third_party/cpaembedded/
|
|
RUN go mod download
|
|
|
|
COPY *.go ./
|
|
COPY internal ./internal
|
|
COPY third_party/cpaembedded ./third_party/cpaembedded
|
|
COPY --from=web-builder /build/internal/webui/dist ./internal/webui/dist
|
|
RUN GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build \
|
|
-ldflags "-s -w -X gpt-load/internal/platform/version.Version=${VERSION}" \
|
|
-o gpt-load
|
|
|
|
|
|
# runtime 是两条打包路径共用的唯一 runtime 定义：默认的源码自包含构建，
|
|
# 以及发布流程复用 build-binaries 预编译产物的 prebuilt。两者只有二进制来源
|
|
# 不同，其余 runtime 配置全部在这里定义一次，避免出现两套配置各自漂移。
|
|
FROM alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS runtime
|
|
|
|
WORKDIR /app
|
|
RUN apk add --no-cache libcrypto3=3.5.8-r0 libssl3=3.5.8-r0 \
|
|
&& apk add --no-cache ca-certificates tzdata \
|
|
&& update-ca-certificates \
|
|
&& addgroup -S -g 10001 gpt-load \
|
|
&& adduser -S -D -H -u 10001 -G gpt-load gpt-load \
|
|
&& mkdir -p /app/data \
|
|
&& chown 10001:10001 /app/data \
|
|
&& chmod 0700 /app/data
|
|
|
|
ENV HOST=0.0.0.0
|
|
ENV DATA_DIR=/app/data
|
|
COPY LICENSE THIRD_PARTY_NOTICES.md /app/licenses/
|
|
COPY LICENSES/Apache-2.0.txt /app/licenses/Apache-2.0.txt
|
|
COPY LICENSES/Inno-Setup.txt /app/licenses/Inno-Setup.txt
|
|
COPY LICENSES/MIT.txt /app/licenses/MIT.txt
|
|
COPY LICENSES/MPL-2.0.txt /app/licenses/MPL-2.0.txt
|
|
EXPOSE 3001 1455 54545 51121
|
|
USER 10001:10001
|
|
ENTRYPOINT ["/app/gpt-load"]
|
|
|
|
|
|
# 发布路径：直接打包 build-binaries 已交叉编译好的二进制，不在镜像内重复编译。
|
|
# 需要 build context 中存在 release/gpt-load-linux-<arch>。
|
|
FROM runtime AS prebuilt
|
|
|
|
ARG TARGETARCH
|
|
# GitHub Actions 的 artifact 不保留可执行位，必须在复制时显式恢复为 0755。
|
|
COPY --chmod=0755 release/gpt-load-linux-${TARGETARCH} /app/gpt-load
|
|
|
|
|
|
# 默认 target：自包含的源码构建，供本地 `docker build .` 与用户自建使用。
|
|
# 必须保持在文件末尾，否则默认构建会落到 prebuilt 而要求预编译产物。
|
|
FROM runtime AS source-build
|
|
|
|
COPY --from=go-builder /build/gpt-load .
|