mirror of
https://github.com/zyycn/codex-proxy-rs.git
synced 2026-11-06 16:06:08 +00:00
128e7998e8
* feat(plugin): add the complete plugin development and management workflow Introduce the isolated plugin runtime, manifest v2 SDK, middleware and host capabilities, installation and configuration management, and cpr-plugin packaging CLI. Separate shared UI and examples into companion repositories. Consolidate plugin persistence, enforce stable key ordering, and release superseded private state atomically. Align documentation, dependency ownership and release integration. Co-authored-by: Codex <noreply@openai.com> * chore(deps): bump debian from `8820086` to `3783cc0` in /deploy Bumps debian from `8820086` to `3783cc0`. --- updated-dependencies: - dependency-name: debian dependency-version: bookworm-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Zyy <zyycn@users.noreply.github.com> Co-authored-by: Codex <noreply@openai.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
97 lines
4.2 KiB
Docker
97 lines
4.2 KiB
Docker
# syntax=docker/dockerfile:1.7@sha256:a57df69d0ea827fb7266491f2813635de6f17269be881f696fbfdf2d83dda33e
|
||
|
||
# PostgreSQL 服务端镜像：备份客户端（pg_dump/pg_restore）从这里取，与 compose 同源、
|
||
# 版本严格一致。升级数据库版本时只需同步修改这里与 deploy/compose.yaml。
|
||
ARG POSTGRES_IMAGE=postgres:18-bookworm@sha256:d9c83446333daec3f0588cc709adb80c26090b7f9f0f7ec8d43c243385d79818
|
||
|
||
FROM node:26-bookworm-slim@sha256:2d49d876e96237d76de412761cf05dbfe5aee325cc4406a4d41d5824c5bb8beb AS frontend-builder
|
||
|
||
WORKDIR /app/frontend
|
||
COPY frontend/package.json frontend/pnpm-lock.yaml frontend/pnpm-workspace.yaml ./
|
||
RUN npm install --global "$(node -p 'require("./package.json").packageManager')" \
|
||
&& pnpm install --frozen-lockfile
|
||
COPY frontend ./
|
||
RUN pnpm build
|
||
|
||
FROM rust:1.98-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e AS backend-builder
|
||
|
||
WORKDIR /app/backend
|
||
ARG TARGETARCH
|
||
ARG CPR_VERSION=
|
||
ARG CPR_GIT_SHA=unknown
|
||
ARG CPR_BUILD_TIME=unknown
|
||
ARG CPR_BUILD_TYPE=release
|
||
ENV CARGO_TARGET_DIR=/app/backend/target/${TARGETARCH}
|
||
ENV CPR_VERSION=${CPR_VERSION}
|
||
ENV CPR_GIT_SHA=${CPR_GIT_SHA}
|
||
ENV CPR_BUILD_TIME=${CPR_BUILD_TIME}
|
||
ENV CPR_BUILD_TYPE=${CPR_BUILD_TYPE}
|
||
COPY backend/Cargo.toml backend/Cargo.lock ./
|
||
COPY backend/apps ./apps
|
||
COPY backend/crates ./crates
|
||
COPY backend/migrations ./migrations
|
||
COPY release/version.yaml /app/release/version.yaml
|
||
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
||
--mount=type=cache,target=/usr/local/cargo/git \
|
||
--mount=type=cache,target=/app/backend/target \
|
||
cargo build --release --locked --bin codex-proxy-rs \
|
||
&& cp "${CARGO_TARGET_DIR}/release/codex-proxy-rs" /tmp/codex-proxy-rs
|
||
|
||
# 备份客户端来源：与 compose 服务端同一固定镜像，版本一致。
|
||
FROM ${POSTGRES_IMAGE} AS pg-client
|
||
|
||
FROM debian:bookworm-slim@sha256:3783cc01769c7b2b1b83a5c5ad96c815348e28ed7da68e2e3687004faa906251 AS runtime-base
|
||
|
||
ENV TZ=Asia/Shanghai
|
||
|
||
# 运行时基础只从 Debian 官方源补 libpq（pg_dump 的动态依赖；ABI 兼容，无需引入第三方
|
||
# APT 源）。pg_dump/pg_restore 二进制由 pg-client stage COPY，构建期不依赖运行时安装。
|
||
# 更新基础镜像已有的系统包，使固定 digest 的镜像也能获取 Debian 安全更新。
|
||
RUN apt-get update \
|
||
&& DEBIAN_FRONTEND=noninteractive apt-get upgrade -y \
|
||
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates curl tzdata libpq5 \
|
||
&& install -d /usr/lib/postgresql/18/bin \
|
||
&& ln -snf "/usr/share/zoneinfo/${TZ}" /etc/localtime \
|
||
&& printf '%s\n' "${TZ}" > /etc/timezone \
|
||
&& groupadd --system --gid 10001 cpr \
|
||
&& useradd --system --uid 10001 --gid cpr --home-dir /app --shell /usr/sbin/nologin cpr \
|
||
&& install -d -o cpr -g cpr \
|
||
/app/bin /app/deploy /app/.runtime/data /app/.runtime/logs /app/web \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
COPY --from=pg-client /usr/lib/postgresql/18/bin/pg_dump /usr/lib/postgresql/18/bin/pg_dump
|
||
COPY --from=pg-client /usr/lib/postgresql/18/bin/pg_restore /usr/lib/postgresql/18/bin/pg_restore
|
||
RUN /usr/lib/postgresql/18/bin/pg_dump --version \
|
||
&& /usr/lib/postgresql/18/bin/pg_restore --version
|
||
|
||
WORKDIR /app
|
||
ENV CPR_DEPLOYMENT_MODE=docker
|
||
ENV PATH="/app/bin:/usr/lib/postgresql/18/bin:${PATH}"
|
||
|
||
EXPOSE 8080
|
||
|
||
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
||
CMD curl -fsS http://127.0.0.1:8080/healthz || exit 1
|
||
|
||
CMD ["/app/bin/codex-proxy-rs"]
|
||
|
||
FROM runtime-base AS runtime
|
||
|
||
COPY --from=backend-builder --chown=cpr:cpr /tmp/codex-proxy-rs /app/bin/codex-proxy-rs
|
||
COPY --from=frontend-builder --chown=cpr:cpr /app/frontend/dist ./web/dist
|
||
USER cpr
|
||
|
||
FROM runtime-base AS runtime-prebuilt
|
||
|
||
ARG TARGETARCH
|
||
ARG CPR_PREBUILT_DIR=dist/docker
|
||
|
||
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/linux-${TARGETARCH}/codex-proxy-rs /app/bin/codex-proxy-rs
|
||
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/web/dist ./web/dist
|
||
COPY --chown=cpr:cpr ${CPR_PREBUILT_DIR}/linux-${TARGETARCH}/plugins/official /app/bin/plugins/official
|
||
RUN chmod +x /app/bin/codex-proxy-rs \
|
||
&& find /app/bin/plugins/official -type f -exec chmod 0444 '{}' + \
|
||
&& chmod 0555 /app/bin/plugins/official \
|
||
&& chmod 0755 /app/bin/plugins
|
||
USER cpr
|