feat: 更新脚本；增加CI/CD模板
This commit is contained in:
+113
-112
@@ -1,156 +1,157 @@
|
||||
# Ver: 1.8 by Endial Fang (endial@126.com)
|
||||
# Ver: 1.10 by Endial Fang (endial@126.com)
|
||||
#
|
||||
|
||||
# 默认变量 ========================================================================
|
||||
# 该部分变量为系统根据编译命令默认设置
|
||||
|
||||
# `TARGETPLATFORM`：构建后的目标平台信息。如 `linux/amd64`，`linux/arm/v7`，`windows/amd64`
|
||||
# `TARGETOS`：目标平台信息（TARGETPLATFORM）中的操作系统部分，如：`linux`、`windows`
|
||||
# `TARGETARCH`：目标平台信息（TARGETPLATFORM）中的平台架构部分，如：`amd64`、`arm`
|
||||
# `TARGETVARIANT`：目标平台信息（TARGETPLATFORM）中的版本变体部分，如：`v7`
|
||||
# `BUILDPLATFORM`：用于构建的节点平台信息
|
||||
# `BUILDOS`：用于构建的节点平台信息（BUILDPLATFORM）中的操作系统部分
|
||||
# `BUILDARCH`用于构建的节点平台信息（BUILDPLATFORM）中的平台架构部分
|
||||
# `BUILDVARIANT`用于构建的节点平台信息（BUILDPLATFORM）中的版本变体部分
|
||||
|
||||
# 可变参数 ========================================================================
|
||||
# 该部分变量，在编译命令中通过 `--build-arg` 传入；如果未设置，则使用下面对应的默认值
|
||||
|
||||
# 设置当前应用名称及版本
|
||||
ARG app_name=test
|
||||
ARG app_version=1.0.0
|
||||
|
||||
# 设置默认仓库地址，默认为 阿里云 仓库
|
||||
ARG registry_url="registry.cn-shenzhen.aliyuncs.com"
|
||||
|
||||
# 设置 apt-get 源：default / tencent / ustc / aliyun / huawei
|
||||
ARG apt_source=aliyun
|
||||
|
||||
# 编译镜像时指定用于加速的本地服务器地址
|
||||
ARG local_url=""
|
||||
|
||||
ARG APP_NAME=test # 设置当前应用名称
|
||||
ARG APP_VER=1.0.0 # 设置当前应用版本
|
||||
ARG REGISTRY_URL="docker.colovu.com/" # 设置默认仓库地址，默认为本地仓库；定义时需要包含末尾的`/`
|
||||
ARG APT_SOURCE=aliyun # 设置 apt-get 源：default / ustc / aliyun
|
||||
ARG LOCAL_URL="http://local.colovu.com/dist" # 编译镜像时指定用于加速的本地软件包存储服务器地址
|
||||
|
||||
# 0. 预处理 ======================================================================
|
||||
FROM ${registry_url}/colovu/dbuilder as builder
|
||||
FROM --platform=${TARGETPLATFORM:-linux/amd64} ${REGISTRY_URL}colovu/dbuilder:12 as builder
|
||||
#FROM --platform=${TARGETPLATFORM:-linux/amd64} ${REGISTRY_URL}colovu/openjdk:8 as builder
|
||||
#FROM --platform=${TARGETPLATFORM:-linux/amd64} ${REGISTRY_URL}colovu/golang:1.21 as builder
|
||||
|
||||
# 声明需要使用的全局可变参数
|
||||
ARG app_name
|
||||
ARG app_version
|
||||
ARG registry_url
|
||||
ARG apt_source
|
||||
ARG local_url
|
||||
ARG APP_NAME
|
||||
ARG APP_VER
|
||||
ARG APT_SOURCE
|
||||
ARG LOCAL_URL
|
||||
|
||||
# 选择软件包源(Optional)，以加速后续软件包安装
|
||||
RUN select_source ${apt_source};
|
||||
RUN select_source ${APT_SOURCE};
|
||||
|
||||
# 安装依赖的软件包及库(Optional)
|
||||
#RUN install_pkg xz-utils
|
||||
|
||||
# 设置工作目录
|
||||
WORKDIR /tmp
|
||||
# dbuilder已安装: libtool libltdl7 libltdl-dev libssl3 libssl-dev
|
||||
|
||||
# 下载并解压软件包
|
||||
#RUN set -eux; \
|
||||
# appName=${app_name}-${app_version}.tgz; \
|
||||
# appKeys="0xB42F6819007F00F88E364FD4036A9C25BF357DD4"; \
|
||||
# sha256="04fa1fddc39bd1aecb6739dd5dd73858a3515b427acd1e2947a66dadce868d68"; \
|
||||
# [ ! -z ${local_url} ] && localURL=${local_url}/${app_name}; \
|
||||
# appUrls="${localURL:-} \
|
||||
# https://github.com/tianon/gosu/releases/download/${appVersion} \
|
||||
# "; \
|
||||
# download_pkg install ${appName} "${appUrls}" -g "${appKeys}" -s "${sha256}"; \
|
||||
# download_pkg unpack ${appName} "${appUrls}"; \
|
||||
# chmod +x /usr/local/bin/${appName};
|
||||
RUN set -eux; \
|
||||
if [ "$TARGETARCH" = "arm64" ]]; \
|
||||
then appArch=aarch64; \
|
||||
else appArch=x64; \
|
||||
fi; \
|
||||
appName="${APP_NAME}-${appArch}-${APP_VER}.tar.gz"; \
|
||||
appKeys="0xB42F6819007F00F88E364FD4036A9C25BF357DD4"; \
|
||||
sha256="04fa1fddc39bd1aecb6739dd5dd73858a3515b427acd1e2947a66dadce868d68"; \
|
||||
[ -n ${LOCAL_URL} ] && localURL=${LOCAL_URL}/${APP_NAME}; \
|
||||
appUrls="${localURL:-} \
|
||||
https://github.com/tianon/gosu/releases/download/${APP_VER} \
|
||||
"; \
|
||||
download_pkg install ${appName} "${appUrls}" -g "${appKeys}" -s "${sha256}"; \
|
||||
download_pkg unpack ${appName} "${appUrls}"; \
|
||||
chmod +x /usr/local/bin/${appName};
|
||||
|
||||
# 源码编译
|
||||
#RUN set -eux; \
|
||||
# APP_SRC="/tmp/${app_name}-${app_version}"; \
|
||||
# cd ${APP_SRC}; \
|
||||
# ./configure \
|
||||
# --prefix=/usr/local/${app_name} \
|
||||
# CPPFLAGS="-I/usr/local/include -D_GNU_SOURCE" \
|
||||
# LDFLAGS="-L/usr/local/lib" \
|
||||
# ; \
|
||||
# make -j "$(nproc)"; \
|
||||
# make install;
|
||||
RUN set -eux; \
|
||||
APP_ARCH=`arch` \
|
||||
APP_SRC="/tmp/${APP_NAME}-${APP_VER}"; \
|
||||
cd ${APP_SRC}; \
|
||||
LDFLAGS="-L/usr/local/lib -L/usr/lib/${APP_ARCH}-linux-gnu" \
|
||||
CPPFLAGS="-I/usr/local/include -D_GNU_SOURCE" \
|
||||
./configure \
|
||||
--prefix=/usr/local/${APP_NAME} \
|
||||
; \
|
||||
make -j "$(nproc)" && make install; \
|
||||
strip /usr/local/${APP_NAME}/sbin/${APP_NAME};
|
||||
|
||||
# 删除编译生成的多余文件
|
||||
RUN set -eux; \
|
||||
find /usr/local -name '*.a' -delete; \
|
||||
rm -rf /usr/local/${app_name}/share; \
|
||||
rm -rf /usr/local/${app_name}/include;
|
||||
rm -rf /usr/local/${APP_NAME}/share; \
|
||||
rm -rf /usr/local/${APP_NAME}/include;
|
||||
|
||||
# 检测并生成依赖文件记录
|
||||
RUN set -eux; \
|
||||
find /usr/local/${app_name} -type f -executable -exec ldd '{}' ';' | \
|
||||
find /usr/local/${APP_NAME} -type f -executable -exec ldd '{}' ';' | \
|
||||
awk '/=>/ { print $(NF-1) }' | \
|
||||
sort -u | \
|
||||
xargs -r readlink -f | \
|
||||
xargs -r dpkg-query --search 2>/dev/null | \
|
||||
cut -d: -f1 | \
|
||||
sort -u >/usr/local/${app_name}/runDeps;
|
||||
|
||||
sort -u >>/usr/local/${APP_NAME}/runDeps;
|
||||
|
||||
# 1. 生成镜像 =====================================================================
|
||||
FROM ${registry_url}/colovu/debian:buster
|
||||
FROM ${registry_url}/colovu/openjre:8
|
||||
FROM --platform=${TARGETPLATFORM:-linux/amd64} ${REGISTRY_URL}colovu/debian:12
|
||||
#FROM --platform=${TARGETPLATFORM:-linux/amd64} ${REGISTRY_URL}colovu/openjre:8
|
||||
|
||||
# 声明需要使用的全局可变参数
|
||||
ARG app_name
|
||||
ARG app_version
|
||||
ARG registry_url
|
||||
ARG apt_source
|
||||
ARG local_url
|
||||
# 声明需要使用的全局可变参数（ARG声明的变量仅编译打包阶段有效）
|
||||
ARG APP_NAME
|
||||
ARG APP_VER
|
||||
ARG APT_SOURCE
|
||||
|
||||
# 镜像所包含应用的基础信息，定义环境变量，供后续脚本使用
|
||||
ENV APP_NAME=${app_name} \
|
||||
APP_EXEC=${app_name} \
|
||||
APP_VERSION=${app_version}
|
||||
# 定义应用的基础信息变量（ENV声明的变量实例化后容器内有效）
|
||||
ENV APP_NAME=${APP_NAME} \
|
||||
APP_VER=${APP_VER} \
|
||||
APP_EXEC=${APP_NAME} \
|
||||
APP_USER=${APP_NAME} \
|
||||
APP_HOME=/srv/${APP_NAME} \
|
||||
APP_BASE=/usr/local/${APP_NAME}
|
||||
|
||||
ENV APP_HOME_DIR=/usr/local/${APP_NAME} \
|
||||
APP_DEF_DIR=/etc/${APP_NAME}
|
||||
|
||||
ENV PATH="${APP_HOME_DIR}/sbin:${APP_HOME_DIR}/bin:${PATH}" \
|
||||
LD_LIBRARY_PATH="${APP_HOME_DIR}/lib"
|
||||
# 增加应用可执行文件及库文件搜索路径
|
||||
ENV PATH="${PATH}:/usr/local/${APP_NAME}/bin" \
|
||||
CLASSPATH=".:/usr/local/${APP_NAME}/lib" \
|
||||
LD_LIBRARY_PATH="/usr/local/${APP_NAME}/lib"
|
||||
|
||||
LABEL \
|
||||
"Version"="v${app_version}" \
|
||||
"Description"="Docker image for ${app_name}(v${app_version})." \
|
||||
"Dockerfile"="https://github.com/colovu/docker-${app_name}" \
|
||||
"Version"="v${APP_VER}" \
|
||||
"Description"="Docker image for ${APP_NAME}." \
|
||||
"Github"="https://github.com/colovu/docker-${APP_NAME}" \
|
||||
"Vendor"="Endial Fang (endial@126.com)"
|
||||
|
||||
# 从预处理过程中拷贝软件包(Optional)，可以使用阶段编号或阶段命名定义来源
|
||||
COPY --from=0 /usr/local/${APP_NAME} /usr/local/${APP_NAME}
|
||||
VOLUME ["/srv/${APP_NAME}"] # 默认提供的数据卷
|
||||
WORKDIR /srv/${APP_NAME} # 设置工作目录
|
||||
EXPOSE 8080 8443 # 默认使用gosu切换为新建用户启动，必须保证端口在1024之上
|
||||
|
||||
# 拷贝应用使用的客制化脚本，并创建对应的用户及数据存储目录
|
||||
# 从预处理过程中拷贝软件包，可以使用阶段编号或阶段命名定义来源
|
||||
COPY --from=builder /usr/local/${APP_NAME} /usr/local/${APP_NAME}
|
||||
|
||||
# 拷贝应用使用的客制化脚本
|
||||
COPY customer /
|
||||
|
||||
RUN set -eux; \
|
||||
prepare_env; \
|
||||
/bin/bash -c "ln -sf /usr/local/${APP_NAME}/etc/${APP_NAME} /etc/";
|
||||
|
||||
# 选择软件包源(Optional)，以加速后续软件包安装
|
||||
RUN select_source ${apt_source}
|
||||
|
||||
# 安装依赖的软件包及库(Optional)
|
||||
RUN install_pkg `cat /usr/local/${APP_NAME}/runDeps`;
|
||||
#RUN install_pkg bash sudo libssl1.1
|
||||
|
||||
# 执行预处理脚本，并验证安装的软件包
|
||||
RUN set -eux; \
|
||||
override_file="/usr/local/overrides/overrides-${APP_VERSION}.sh"; \
|
||||
[ -e "${override_file}" ] && /bin/bash "${override_file}"; \
|
||||
\
|
||||
# 创建对应的用户及数据存储目录
|
||||
useradd -U -u 996 -d ${APP_HOME} -s /usr/sbin/nologin -r ${APP_USER}; \
|
||||
mkdir -p /var/log/${APP_NAME} /var/run/${APP_NAME} /var/cache/${APP_NAME} ${APP_HOME}/{conf,data,cert}; \
|
||||
chown -R ${APP_USER}:${APP_USER} /var/log/${APP_NAME} /var/run/${APP_NAME} /var/cache/${APP_NAME} ${APP_HOME}; \
|
||||
\
|
||||
/bin/bash -c "ln -sf ${APP_BASE}/etc/${APP_NAME} /etc/"; \
|
||||
\
|
||||
# 选择软件包源，以加速后续软件包安装
|
||||
select_source ${APT_SOURCE}; \
|
||||
\
|
||||
# 安装应用依赖的软件包及库
|
||||
install_pkg curl; \
|
||||
install_pkg `cat ${APP_BASE}/runDeps`; \
|
||||
\
|
||||
# 执行后处理脚本
|
||||
overrideShell="/usr/local/overrides/overrides-${APP_VER}.sh"; \
|
||||
[ -e "${overrideShell}" ] && /bin/bash "${overrideShell}"; \
|
||||
\
|
||||
# 验证安装的应用
|
||||
${APP_EXEC} --version ;
|
||||
|
||||
# 默认提供的数据卷
|
||||
VOLUME ["/srv/conf", "/srv/data", "/srv/datalog", "/srv/cert", "/var/log"]
|
||||
|
||||
# 默认non-root用户启动，必须保证端口在1024之上
|
||||
EXPOSE 8080 8443
|
||||
|
||||
# 关闭基础镜像的健康检查
|
||||
#HEALTHCHECK NONE
|
||||
|
||||
# 应用健康状态检查
|
||||
#HEALTHCHECK --interval=30s --timeout=30s --retries=3 \
|
||||
# CMD curl -fs http://localhost:8080/ || exit 1
|
||||
#HEALTHCHECK --interval=10s --timeout=10s --retries=3 \
|
||||
# CMD netstat -ltun | grep 8080
|
||||
|
||||
# 使用 non-root 用户运行后续的命令
|
||||
USER 1001
|
||||
|
||||
# 设置工作目录
|
||||
WORKDIR /srv/conf
|
||||
|
||||
# 容器初始化命令
|
||||
ENTRYPOINT ["/usr/local/bin/entry.sh"]
|
||||
|
||||
# 应用程序的启动命令，必须使用非守护进程方式运行
|
||||
CMD ["/usr/local/bin/run.sh"]
|
||||
#HEALTHCHECK NONE
|
||||
#HEALTHCHECK --interval=30s --timeout=30s --retries=3 CMD curl -fs http://localhost:8080/ || exit 1
|
||||
#HEALTHCHECK --interval=10s --timeout=10s --retries=3 CMD netstat -ltun | grep 8080
|
||||
|
||||
# 容器入口脚本及应用启动命令
|
||||
ENTRYPOINT ["dumb-init", "entry.sh"]
|
||||
CMD ["run.sh"]
|
||||
|
||||
Reference in New Issue
Block a user