Wang Zhuoxuan
f390e23ba7
Some checks failed
CI/CD Pipeline / Code Quality (push) Successful in 15s
CI/CD Pipeline / Unit Tests (push) Successful in 10s
CI/CD Pipeline / Build Test Image (push) Has been skipped
CI/CD Pipeline / Deploy to Test (push) Has been skipped
CI/CD Pipeline / Build Production Image (push) Failing after 10s
CI/CD Pipeline / Deploy to Production (push) Has been skipped
- addgroup/adduser → groupadd/useradd (Alpine → Debian) - 安装 curl 用于健康检查
52 lines
1.3 KiB
Docker
52 lines
1.3 KiB
Docker
# Duoqi API - Multi-stage Dockerfile
|
||
# 阶段 1: 构建依赖
|
||
FROM oven/bun:1.3 AS base
|
||
WORKDIR /app
|
||
|
||
# 复制依赖文件
|
||
COPY package.json bun.lock ./
|
||
|
||
# 阶段 2: 安装依赖
|
||
FROM base AS install
|
||
RUN bun install --frozen-lockfile --production
|
||
|
||
# 阶段 3: 构建应用
|
||
FROM base AS build
|
||
COPY --from=install /app/node_modules ./node_modules
|
||
COPY . .
|
||
|
||
# 类型检查和编译
|
||
RUN bun run typecheck
|
||
RUN bun run build
|
||
|
||
# 阶段 4: 生产镜像
|
||
FROM oven/bun:1.3 AS release
|
||
WORKDIR /app
|
||
|
||
# 创建非 root 用户（Debian 兼容命令）
|
||
RUN groupadd --system --gid 1001 nodejs && \
|
||
useradd --system --uid 1001 --gid nodejs --no-create-home --shell /usr/sbin/nologin bun
|
||
|
||
# 安装 curl（用于健康检查）
|
||
RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
|
||
|
||
# 复制生产依赖和构建产物
|
||
COPY --from=install /app/node_modules ./node_modules
|
||
COPY --from=build /app/dist ./dist
|
||
COPY --from=build /app/db ./db
|
||
COPY --from=build /app/package.json ./
|
||
|
||
# 设置权限
|
||
RUN chown -R bun:nodejs /app
|
||
USER bun
|
||
|
||
# 暴露端口
|
||
EXPOSE 3000
|
||
|
||
# 健康检查
|
||
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
||
CMD curl -f http://localhost:3000/health || exit 1
|
||
|
||
# 启动应用
|
||
CMD ["node", "dist/index.js"]
|