mirror of
https://github.com/zyycn/codex-proxy-rs.git
synced 2026-11-06 08:06:19 +00:00
ZyyandCodex
b07bca312a
Extend the startup healthcheck grace period to five minutes and report elapsed migration time every fifteen seconds without changing published migrations. Use one shutdown path for OS signals, internal cancellation, and managed restarts. Stop listening without waiting for active sessions, preserve bounded worker cleanup, and remove the obsolete connection drain timeout. Cover shutdown entry points and worker cleanup with real HTTP lifecycle tests and document the deployment behavior. Co-authored-by: Codex <noreply@openai.com>
98 lines
4.2 KiB
Docker
98 lines
4.2 KiB
Docker
# syntax=docker/dockerfile:1.7@sha256:a57df69d0ea827fb7266491f2813635de6f17269be881f696fbfdf2d83dda33e
|
||
|
||
# PostgreSQL 服务端镜像：备份客户端（pg_dump/pg_restore）从这里取，与 compose 同源、
|
||
# 版本严格一致。升级数据库版本时只需同步修改这里与 deploy/compose.yaml。
|
||
ARG POSTGRES_IMAGE=postgres:18-bookworm@sha256:d9c83446333daec3f0588cc709adb80c26090b7f9f0f7ec8d43c243385d79818
|
||
|
||
FROM node:26-bookworm-slim@sha256:662933cf47f013bc8e4beb31a6116448427a82057ba7c42c97e4c5ba766504c2 AS frontend-builder
|
||
|
||
WORKDIR /app/frontend
|
||
COPY frontend/package.json frontend/pnpm-lock.yaml frontend/pnpm-workspace.yaml ./
|
||
RUN npm install --global "$(node -p 'require("./package.json").packageManager')" \
|
||
&& pnpm install --frozen-lockfile
|
||
COPY frontend ./
|
||
RUN pnpm build
|
||
|
||
FROM rust:1.98-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e AS backend-builder
|
||
|
||
WORKDIR /app/backend
|
||
ARG TARGETARCH
|
||
ARG CPR_VERSION=
|
||
ARG CPR_GIT_SHA=unknown
|
||
ARG CPR_BUILD_TIME=unknown
|
||
ARG CPR_BUILD_TYPE=release
|
||
ENV CARGO_TARGET_DIR=/app/backend/target/${TARGETARCH}
|
||
ENV CPR_VERSION=${CPR_VERSION}
|
||
ENV CPR_GIT_SHA=${CPR_GIT_SHA}
|
||
ENV CPR_BUILD_TIME=${CPR_BUILD_TIME}
|
||
ENV CPR_BUILD_TYPE=${CPR_BUILD_TYPE}
|
||
COPY backend/Cargo.toml backend/Cargo.lock ./
|
||
COPY backend/apps ./apps
|
||
COPY backend/crates ./crates
|
||
COPY backend/migrations ./migrations
|
||
COPY release/version.yaml /app/release/version.yaml
|
||
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
||
--mount=type=cache,target=/usr/local/cargo/git \
|
||
--mount=type=cache,target=/app/backend/target \
|
||
cargo build --release --locked --bin codex-proxy-rs \
|
||
&& cp "${CARGO_TARGET_DIR}/release/codex-proxy-rs" /tmp/codex-proxy-rs
|
||
|
||
# 备份客户端来源：与 compose 服务端同一固定镜像，版本一致。
|
||
FROM ${POSTGRES_IMAGE} AS pg-client
|
||
|
||
FROM debian:bookworm-slim@sha256:3783cc01769c7b2b1b83a5c5ad96c815348e28ed7da68e2e3687004faa906251 AS runtime-base
|
||
|
||
ENV TZ=UTC
|
||
|
||
# 运行时基础只从 Debian 官方源补 libpq（pg_dump 的动态依赖；ABI 兼容，无需引入第三方
|
||
# APT 源）。pg_dump/pg_restore 二进制由 pg-client stage COPY，构建期不依赖运行时安装。
|
||
# 更新基础镜像已有的系统包，使固定 digest 的镜像也能获取 Debian 安全更新。
|
||
RUN apt-get update \
|
||
&& DEBIAN_FRONTEND=noninteractive apt-get upgrade -y \
|
||
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates curl tzdata libpq5 \
|
||
&& install -d /usr/lib/postgresql/18/bin \
|
||
&& ln -snf "/usr/share/zoneinfo/${TZ}" /etc/localtime \
|
||
&& printf '%s\n' "${TZ}" > /etc/timezone \
|
||
&& groupadd --system --gid 10001 cpr \
|
||
&& useradd --system --uid 10001 --gid cpr --home-dir /app --shell /usr/sbin/nologin cpr \
|
||
&& install -d -o cpr -g cpr \
|
||
/app/bin /app/deploy /app/.runtime/data /app/.runtime/logs /app/web \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
COPY --from=pg-client /usr/lib/postgresql/18/bin/pg_dump /usr/lib/postgresql/18/bin/pg_dump
|
||
COPY --from=pg-client /usr/lib/postgresql/18/bin/pg_restore /usr/lib/postgresql/18/bin/pg_restore
|
||
RUN /usr/lib/postgresql/18/bin/pg_dump --version \
|
||
&& /usr/lib/postgresql/18/bin/pg_restore --version
|
||
|
||
WORKDIR /app
|
||
ENV CPR_DEPLOYMENT_MODE=docker
|
||
ENV PATH="/app/bin:/usr/lib/postgresql/18/bin:${PATH}"
|
||
|
||
EXPOSE 8080
|
||
|
||
# 首次升级的历史请求迁移需要启动宽限期
|
||
HEALTHCHECK --interval=30s --timeout=5s --start-period=5m --retries=3 \
|
||
CMD curl -fsS http://127.0.0.1:8080/healthz || exit 1
|
||
|
||
CMD ["/app/bin/codex-proxy-rs"]
|
||
|
||
FROM runtime-base AS runtime
|
||
|
||
COPY --from=backend-builder --chown=cpr:cpr /tmp/codex-proxy-rs /app/bin/codex-proxy-rs
|
||
COPY --from=frontend-builder --chown=cpr:cpr /app/frontend/dist ./web/dist
|
||
USER cpr
|
||
|
||
FROM runtime-base AS runtime-prebuilt
|
||
|
||
ARG TARGETARCH
|
||
ARG CPR_PREBUILT_DIR=dist/docker
|
||
|
||
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/linux-${TARGETARCH}/codex-proxy-rs /app/bin/codex-proxy-rs
|
||
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/web/dist ./web/dist
|
||
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/linux-${TARGETARCH}/plugins/official /app/bin/plugins/official
|
||
RUN chmod +x /app/bin/codex-proxy-rs \
|
||
&& find /app/bin/plugins/official -type f -exec chmod 0444 '{}' + \
|
||
&& chmod 0555 /app/bin/plugins/official \
|
||
&& chmod 0755 /app/bin/plugins
|
||
USER cpr
|