wehub-resource-sync
93 lines
2.9 KiB
Docker
93 lines
2.9 KiB
Docker
# tianji reporter
|
|
FROM golang:1.25.11-bookworm AS reporter
|
|
ENV PATH="/usr/local/go/bin:${PATH}"
|
|
WORKDIR /app
|
|
|
|
COPY ./reporter/ ./reporter/
|
|
|
|
RUN apt update
|
|
RUN cd reporter && CGO_ENABLED=0 GOOS=linux go build -a -ldflags '-extldflags "-static"' -o tianji-reporter .
|
|
|
|
# Base ------------------------------
|
|
# Pin below Alpine 3.24 until Docker Hub static scans handle it reliably.
|
|
FROM node:22.22-alpine3.23 AS base
|
|
|
|
RUN npm install -g pnpm@10.27.0
|
|
|
|
# For apprise and Prisma
|
|
RUN apk add --update --no-cache python3 py3-pip g++ make openssl
|
|
|
|
# For puppeteer
|
|
RUN apk upgrade --no-cache --available glib \
|
|
&& apk add --no-cache \
|
|
chromium-swiftshader \
|
|
ttf-freefont \
|
|
font-noto-emoji \
|
|
&& apk add --no-cache \
|
|
--repository=https://dl-cdn.alpinelinux.org/alpine/edge/community \
|
|
font-wqy-zenhei
|
|
|
|
# For zeromq
|
|
RUN apk add --update --no-cache curl cmake
|
|
|
|
# Tianji frontend ------------------------------
|
|
FROM base AS static
|
|
WORKDIR /app/tianji
|
|
|
|
# use with --build-arg VERSION=xxxx
|
|
ARG VERSION
|
|
|
|
COPY . .
|
|
|
|
RUN pnpm install --filter @tianji/client... --config.dedupe-peer-dependents=false --frozen-lockfile
|
|
|
|
ENV VITE_VERSION=$VERSION
|
|
ENV NODE_OPTIONS="--max-old-space-size=4096"
|
|
|
|
RUN pnpm build:static
|
|
|
|
# Tianji server ------------------------------
|
|
FROM base AS app
|
|
WORKDIR /app/tianji
|
|
|
|
# We don't need the standalone Chromium in alpine.
|
|
ENV PUPPETEER_SKIP_DOWNLOAD=true
|
|
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
|
|
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
|
|
|
|
COPY . .
|
|
|
|
RUN pnpm install --filter @tianji/server... --config.dedupe-peer-dependents=false
|
|
|
|
RUN mkdir -p ./src/server/public
|
|
COPY --from=static /app/tianji/geo /app/tianji/geo
|
|
COPY --from=static /app/tianji/src/server/public /app/tianji/src/server/public
|
|
|
|
# Copy reporter binary from reporter stage
|
|
COPY --from=reporter /app/reporter/tianji-reporter /usr/local/bin/tianji-reporter
|
|
RUN chmod +x /usr/local/bin/tianji-reporter
|
|
|
|
RUN pnpm build:server
|
|
|
|
RUN CI=true pnpm prune --prod --config.dedupe-peer-dependents=false
|
|
RUN CI=true pnpm install --filter @tianji/server... --prod --offline --ignore-scripts --config.dedupe-peer-dependents=false
|
|
|
|
RUN pip install apprise cryptography --break-system-packages
|
|
RUN rm -rf /usr/local/lib/node_modules/npm \
|
|
/usr/local/lib/node_modules/pnpm \
|
|
/usr/local/bin/npm \
|
|
/usr/local/bin/npx \
|
|
/usr/local/bin/pnpm \
|
|
/usr/local/bin/pnpx
|
|
|
|
RUN rm -rf ./src/client
|
|
RUN rm -rf ./website
|
|
RUN rm -rf ./reporter
|
|
|
|
EXPOSE 12345
|
|
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
|
CMD curl -f http://localhost:12345/health || exit 1
|
|
|
|
CMD ["sh", "-c", "(cd /app/tianji/src/server && ./node_modules/.bin/prisma migrate deploy && ./node_modules/.bin/tsx ./clickhouse/scripts/apply.ts && NODE_ENV=production node ./dist/src/server/main.js) & sleep 10; /usr/local/bin/tianji-reporter --url \"http://localhost:12345\" --workspace \"clnzoxcy10001vy2ohi4obbi0\" --name \"tianji-container\" --silent > /dev/null & wait -n"]
|