a949969c4d
- Add tini (init: true in compose) to reap orphan Chromium processes - Reduce screenshot push frequency (active 0.12→0.20s, idle 0.35→1.00s, deep idle 1.00→5.00s, backoff 0.60→2.00s) - Add 5s timeout to screenshot in WebSocket push loop - close() now wraps context.close() in asyncio.wait_for(10s) with browser.close() fallback on timeout - Two-phase close logging (closing → closed / close_failed) - Auth-capture sessions evicted after 10min TTL - shutdown() with timeout protection and logging - close_ok correctly tracks success through browser fallback path
67 lines
2.4 KiB
Docker
67 lines
2.4 KiB
Docker
# syntax=docker/dockerfile:1.4
|
|
# ---- Stage 1: Build frontend ----
|
|
FROM node:20-alpine AS frontend-build
|
|
WORKDIR /frontend
|
|
|
|
# 依赖层:package*.json 不变则复用 npm 缓存
|
|
COPY frontend/package*.json ./
|
|
RUN --mount=type=cache,target=/root/.npm \
|
|
npm ci --registry=https://registry.npmmirror.com
|
|
|
|
# 源码层:业务代码变更不影响上层依赖
|
|
COPY frontend/ .
|
|
RUN npm run build
|
|
|
|
# ---- Stage 2: Python backend ----
|
|
FROM python:3.12-slim
|
|
WORKDIR /app
|
|
|
|
ENV PLAYWRIGHT_DOWNLOAD_HOST=https://npmmirror.com/mirrors/playwright
|
|
ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
|
|
|
|
RUN sed -i 's|http://deb.debian.org|https://mirrors.aliyun.com|g; s|http://security.debian.org|https://mirrors.aliyun.com|g' /etc/apt/sources.list.d/debian.sources
|
|
|
|
# Install tini as PID 1 to properly reap orphan Chromium zombie processes
|
|
RUN apt-get update && apt-get install -y --no-install-recommends tini && rm -rf /var/lib/apt/lists/*
|
|
|
|
# 系统依赖层:apt 包安装,缓存 deb 包避免重复下载
|
|
RUN --mount=type=cache,target=/var/cache/apt \
|
|
apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
fonts-liberation fonts-unifont fonts-wqy-zenhei \
|
|
libasound2t64 libatk-bridge2.0-0 libatk1.0-0 libatspi2.0-0 \
|
|
libcairo2 libcups2 libdbus-1-3 libdrm2 libegl1 libfontconfig1 \
|
|
libfreetype6 libgbm1 libglib2.0-0t64 libgtk-3-0t64 libnspr4 libnss3 \
|
|
libpango-1.0-0 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 \
|
|
libxdamage1 libxext6 libxfixes3 libxrandr2 libxshmfence1 xvfb \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Python 依赖层:requirements.txt 不变则复用 pip 缓存
|
|
COPY backend/requirements.txt .
|
|
RUN --mount=type=cache,target=/root/.cache/pip \
|
|
pip install --index-url https://pypi.tuna.tsinghua.edu.cn/simple \
|
|
--trusted-host pypi.tuna.tsinghua.edu.cn \
|
|
-r requirements.txt
|
|
|
|
# Playwright Chromium:安装在镜像层中,业务代码变更不会触发重下
|
|
# --mount=type=cache 利用 BuildKit 缓存避免每次构建重下 ~170 MB 浏览器
|
|
RUN --mount=type=cache,target=/root/.cache/ms-playwright,sharing=locked \
|
|
playwright install chromium
|
|
|
|
# 源码层:业务代码变更不影响上面所有依赖层
|
|
COPY backend/ .
|
|
|
|
# 前端构建产物
|
|
COPY --from=frontend-build /frontend/dist ./static
|
|
|
|
RUN mkdir -p /app/data
|
|
|
|
ENV PYTHONPATH=/app
|
|
ENV DATABASE_URL=sqlite:////app/data/app.db
|
|
|
|
EXPOSE 8000
|
|
|
|
ENTRYPOINT ["tini", "--"]
|
|
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|