mirror of
https://github.com/zyycn/codex-proxy-rs.git
synced 2026-11-06 16:06:08 +00:00
zyycnandCodex
75773a4608
Rebuild the backend as the frozen gateway workspace with a single PostgreSQL schema, provider-owned OpenAI and xAI boundaries, and mirrored domain tests. Restore the admin product contracts for accounts, model catalogs, usage observability, billing details, and provider-scoped settings without compatibility shims. Co-authored-by: Codex <noreply@openai.com>
94 lines
3.2 KiB
Docker
94 lines
3.2 KiB
Docker
# syntax=docker/dockerfile:1.7@sha256:a57df69d0ea827fb7266491f2813635de6f17269be881f696fbfdf2d83dda33e
|
|
|
|
FROM node:26-bookworm-slim@sha256:2d49d876e96237d76de412761cf05dbfe5aee325cc4406a4d41d5824c5bb8beb AS frontend-builder
|
|
|
|
WORKDIR /app/frontend
|
|
COPY frontend/package.json frontend/pnpm-lock.yaml frontend/pnpm-workspace.yaml ./
|
|
RUN npm install --global pnpm@11.7.0 \
|
|
&& pnpm install --frozen-lockfile
|
|
COPY frontend ./
|
|
RUN pnpm build
|
|
|
|
FROM rust:1.97-bookworm@sha256:8fa55b2f3ddf97471ab6a767bfa3f37e6bad0986ba823e75fea57e2a2a5c3073 AS backend-builder
|
|
|
|
WORKDIR /app/backend
|
|
ARG TARGETARCH
|
|
ARG CPR_VERSION=
|
|
ARG CPR_GIT_SHA=unknown
|
|
ARG CPR_BUILD_TIME=unknown
|
|
ARG CPR_BUILD_TYPE=release
|
|
ENV CARGO_TARGET_DIR=/app/backend/target/${TARGETARCH}
|
|
ENV CPR_VERSION=${CPR_VERSION}
|
|
ENV CPR_GIT_SHA=${CPR_GIT_SHA}
|
|
ENV CPR_BUILD_TIME=${CPR_BUILD_TIME}
|
|
ENV CPR_BUILD_TYPE=${CPR_BUILD_TYPE}
|
|
COPY backend/Cargo.toml backend/Cargo.lock ./
|
|
COPY backend/apps ./apps
|
|
COPY backend/crates ./crates
|
|
COPY backend/migrations ./migrations
|
|
COPY release/version.yaml /app/release/version.yaml
|
|
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
|
--mount=type=cache,target=/usr/local/cargo/git \
|
|
--mount=type=cache,target=/app/backend/target \
|
|
cargo build --release --locked --bin codex-proxy-rs \
|
|
&& cp "${CARGO_TARGET_DIR}/release/codex-proxy-rs" /tmp/codex-proxy-rs
|
|
|
|
FROM backend-builder AS release-asset-builder
|
|
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
|
|
WORKDIR /out
|
|
COPY --from=frontend-builder /app/frontend/dist /tmp/release/codex-proxy-rs/web/dist
|
|
RUN test -n "${CPR_VERSION}" \
|
|
&& test -n "${TARGETOS}" \
|
|
&& test -n "${TARGETARCH}" \
|
|
&& cp /tmp/codex-proxy-rs /tmp/release/codex-proxy-rs/ \
|
|
&& tar -czf "/out/codex-proxy-rs_${CPR_VERSION}_${TARGETOS}_${TARGETARCH}.tar.gz" \
|
|
-C /tmp/release codex-proxy-rs
|
|
|
|
FROM scratch AS release-asset
|
|
|
|
COPY --from=release-asset-builder /out /
|
|
|
|
FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818 AS runtime-base
|
|
|
|
ENV TZ=Asia/Shanghai
|
|
|
|
RUN apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates curl tzdata \
|
|
&& ln -snf "/usr/share/zoneinfo/${TZ}" /etc/localtime \
|
|
&& printf '%s\n' "${TZ}" > /etc/timezone \
|
|
&& groupadd --system --gid 10001 cpr \
|
|
&& useradd --system --uid 10001 --gid cpr --home-dir /app --shell /usr/sbin/nologin cpr \
|
|
&& install -d -o cpr -g cpr \
|
|
/app/bin /app/deploy /app/.runtime/data /app/.runtime/logs /app/web \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
ENV CPR_DEPLOYMENT_MODE=docker
|
|
ENV PATH="/app/bin:${PATH}"
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD curl -fsS http://127.0.0.1:8080/healthz || exit 1
|
|
|
|
CMD ["/app/bin/codex-proxy-rs"]
|
|
|
|
FROM runtime-base AS runtime
|
|
|
|
COPY --from=backend-builder --chown=cpr:cpr /tmp/codex-proxy-rs /app/bin/codex-proxy-rs
|
|
COPY --from=frontend-builder --chown=cpr:cpr /app/frontend/dist ./web/dist
|
|
USER cpr
|
|
|
|
FROM runtime-base AS runtime-prebuilt
|
|
|
|
ARG TARGETARCH
|
|
ARG CPR_PREBUILT_DIR=dist/docker
|
|
|
|
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/linux-${TARGETARCH}/codex-proxy-rs /app/bin/codex-proxy-rs
|
|
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/web/dist ./web/dist
|
|
RUN chmod +x /app/bin/codex-proxy-rs
|
|
USER cpr
|