77 lines
2.7 KiB
Docker
77 lines
2.7 KiB
Docker
# syntax=docker/dockerfile:1
|
||
# Knowledge Service — production image (HTTP :8421)
|
||
#
|
||
# Build:
|
||
# DOCKER_BUILDKIT=1 docker build -t team-knowledge:0.1.0 .
|
||
#
|
||
# Run (CLI flags, no .env):
|
||
# docker run -d -p 8421:8421 -v team-knowledge-data:/app/data team-knowledge:0.1.0 \
|
||
# --public-url http://203.0.113.10:8421/v3 \
|
||
# --tmc-callback http://203.0.113.10:8123 \
|
||
# --llm-key sk-xxx --llm-base-url https://api.example.com/v1
|
||
|
||
# ── Stage 1: build ──
|
||
FROM node:22-slim AS builder
|
||
|
||
RUN sed -i 's|deb.debian.org|mirrors.tencent.com|g' /etc/apt/sources.list.d/debian.sources 2>/dev/null || \
|
||
sed -i 's|deb.debian.org|mirrors.tencent.com|g' /etc/apt/sources.list 2>/dev/null || true
|
||
|
||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||
apt-get update && apt-get install -y --no-install-recommends \
|
||
python3 make g++ git ca-certificates \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
WORKDIR /app
|
||
|
||
COPY package.json .npmrc* ./
|
||
RUN --mount=type=cache,id=npm-cache-knowledge,target=/root/.npm \
|
||
npm install --no-audit --no-fund
|
||
|
||
COPY tsconfig.json tsdown.config.ts ./
|
||
COPY src/ ./src/
|
||
# 只拷 runtime 必需的 openapi.yaml（Swagger UI 从 docs/api/openapi.yaml 读取，
|
||
# 见 src/server.ts:86）。docs 下其它 md 文件不参与运行时，不入镜像。
|
||
COPY docs/api/openapi.yaml ./docs/api/openapi.yaml
|
||
|
||
RUN npm run build
|
||
RUN npm prune --omit=dev
|
||
|
||
# ── Stage 2: runtime ──
|
||
FROM node:22-slim AS runtime
|
||
|
||
RUN sed -i 's|deb.debian.org|mirrors.tencent.com|g' /etc/apt/sources.list.d/debian.sources 2>/dev/null || \
|
||
sed -i 's|deb.debian.org|mirrors.tencent.com|g' /etc/apt/sources.list 2>/dev/null || true
|
||
|
||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||
apt-get update && apt-get install -y --no-install-recommends \
|
||
git curl ca-certificates tini \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
WORKDIR /app
|
||
|
||
COPY --from=builder /app/node_modules ./node_modules
|
||
COPY --from=builder /app/dist ./dist
|
||
COPY --from=builder /app/docs ./docs
|
||
COPY --from=builder /app/package.json ./
|
||
|
||
COPY docker/entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
||
COPY docker/smoke-test.sh /usr/local/bin/smoke-test.sh
|
||
RUN chmod +x /usr/local/bin/docker-entrypoint.sh /usr/local/bin/smoke-test.sh \
|
||
&& mkdir -p /app/data
|
||
|
||
ENV NODE_ENV=production \
|
||
PORT=8421 \
|
||
KNOWLEDGE_DATA_DIR=/app/data \
|
||
KNOWLEDGE_DB_PATH=/app/data/knowledge.db \
|
||
LOG_LEVEL=info
|
||
|
||
EXPOSE 8421
|
||
|
||
HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
|
||
CMD node -e "fetch('http://127.0.0.1:8421/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
|
||
|
||
ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/docker-entrypoint.sh"]
|
||
CMD ["start"]
|