mirror of https://github.com/jumpserver/jumpserver
perf: 优化 Dockerfile
parent
7061ce7c97
commit
7bfa21260c
96
Dockerfile
96
Dockerfile
|
@ -1,53 +1,66 @@
|
||||||
|
FROM python:3.8-slim as stage-build
|
||||||
|
ARG TARGETARCH
|
||||||
|
|
||||||
|
ARG VERSION
|
||||||
|
ENV VERSION=$VERSION
|
||||||
|
|
||||||
|
WORKDIR /opt/jumpserver
|
||||||
|
ADD . .
|
||||||
|
RUN cd utils && bash -ixeu build.sh
|
||||||
|
|
||||||
FROM python:3.8-slim
|
FROM python:3.8-slim
|
||||||
|
ARG TARGETARCH
|
||||||
MAINTAINER JumpServer Team <ibuler@qq.com>
|
MAINTAINER JumpServer Team <ibuler@qq.com>
|
||||||
|
|
||||||
ARG BUILD_DEPENDENCIES=" \
|
ARG BUILD_DEPENDENCIES=" \
|
||||||
g++ \
|
g++ \
|
||||||
make \
|
make \
|
||||||
pkg-config"
|
pkg-config"
|
||||||
|
|
||||||
ARG DEPENDENCIES=" \
|
ARG DEPENDENCIES=" \
|
||||||
default-libmysqlclient-dev \
|
default-libmysqlclient-dev \
|
||||||
freetds-dev \
|
freetds-dev \
|
||||||
libpq-dev \
|
libpq-dev \
|
||||||
libffi-dev \
|
libffi-dev \
|
||||||
libldap2-dev \
|
libjpeg-dev \
|
||||||
libsasl2-dev \
|
libldap2-dev \
|
||||||
libxml2-dev \
|
libsasl2-dev \
|
||||||
libxmlsec1-dev \
|
libxml2-dev \
|
||||||
libxmlsec1-openssl \
|
libxmlsec1-dev \
|
||||||
libaio-dev \
|
libxmlsec1-openssl \
|
||||||
openssh-client \
|
libaio-dev \
|
||||||
sshpass"
|
openssh-client \
|
||||||
|
sshpass"
|
||||||
|
|
||||||
ARG TOOLS=" \
|
ARG TOOLS=" \
|
||||||
curl \
|
ca-certificates \
|
||||||
default-mysql-client \
|
curl \
|
||||||
iproute2 \
|
default-mysql-client \
|
||||||
iputils-ping \
|
iputils-ping \
|
||||||
locales \
|
locales \
|
||||||
procps \
|
procps \
|
||||||
redis-tools \
|
redis-tools \
|
||||||
telnet \
|
telnet \
|
||||||
vim \
|
vim \
|
||||||
unzip \
|
unzip \
|
||||||
wget"
|
wget"
|
||||||
|
|
||||||
RUN sed -i 's@http://.*.debian.org@http://mirrors.ustc.edu.cn@g' /etc/apt/sources.list \
|
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=core \
|
||||||
|
sed -i 's@http://.*.debian.org@http://mirrors.ustc.edu.cn@g' /etc/apt/sources.list \
|
||||||
|
&& rm -f /etc/apt/apt.conf.d/docker-clean \
|
||||||
|
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
||||||
&& apt-get update \
|
&& apt-get update \
|
||||||
&& apt-get -y install --no-install-recommends ${BUILD_DEPENDENCIES} \
|
&& apt-get -y install --no-install-recommends ${BUILD_DEPENDENCIES} \
|
||||||
&& apt-get -y install --no-install-recommends ${DEPENDENCIES} \
|
&& apt-get -y install --no-install-recommends ${DEPENDENCIES} \
|
||||||
&& apt-get -y install --no-install-recommends ${TOOLS} \
|
&& apt-get -y install --no-install-recommends ${TOOLS} \
|
||||||
&& localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8 \
|
|
||||||
&& cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
|
||||||
&& mkdir -p /root/.ssh/ \
|
&& mkdir -p /root/.ssh/ \
|
||||||
&& echo "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null" > /root/.ssh/config \
|
&& echo "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null" > /root/.ssh/config \
|
||||||
&& sed -i "s@# alias l@alias l@g" ~/.bashrc \
|
&& sed -i "s@# alias l@alias l@g" ~/.bashrc \
|
||||||
&& echo "set mouse-=a" > ~/.vimrc \
|
&& echo "set mouse-=a" > ~/.vimrc \
|
||||||
&& echo "no" | dpkg-reconfigure dash \
|
&& echo "no" | dpkg-reconfigure dash \
|
||||||
|
&& echo "zh_CN.UTF-8" | dpkg-reconfigure locales \
|
||||||
&& rm -rf /var/lib/apt/lists/*
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
ARG TARGETARCH
|
|
||||||
ARG ORACLE_LIB_MAJOR=19
|
ARG ORACLE_LIB_MAJOR=19
|
||||||
ARG ORACLE_LIB_MINOR=10
|
ARG ORACLE_LIB_MINOR=10
|
||||||
ENV ORACLE_FILE="instantclient-basiclite-linux.${TARGETARCH:-amd64}-${ORACLE_LIB_MAJOR}.${ORACLE_LIB_MINOR}.0.0.0dbru.zip"
|
ENV ORACLE_FILE="instantclient-basiclite-linux.${TARGETARCH:-amd64}-${ORACLE_LIB_MAJOR}.${ORACLE_LIB_MINOR}.0.0.0dbru.zip"
|
||||||
|
@ -68,21 +81,18 @@ ARG PIP_MIRROR=https://pypi.douban.com/simple
|
||||||
ENV PIP_MIRROR=$PIP_MIRROR
|
ENV PIP_MIRROR=$PIP_MIRROR
|
||||||
ARG PIP_JMS_MIRROR=https://pypi.douban.com/simple
|
ARG PIP_JMS_MIRROR=https://pypi.douban.com/simple
|
||||||
ENV PIP_JMS_MIRROR=$PIP_JMS_MIRROR
|
ENV PIP_JMS_MIRROR=$PIP_JMS_MIRROR
|
||||||
# 因为以 jms 或者 jumpserver 开头的 mirror 上可能没有
|
|
||||||
RUN pip install --upgrade pip==20.2.4 setuptools==49.6.0 wheel==0.34.2 -i ${PIP_MIRROR} \
|
|
||||||
&& pip install --no-cache-dir $(grep -E 'jms|jumpserver' requirements/requirements.txt) -i ${PIP_JMS_MIRROR} \
|
|
||||||
&& pip install --no-cache-dir -r requirements/requirements.txt -i ${PIP_MIRROR} \
|
|
||||||
&& rm -rf ~/.cache/pip
|
|
||||||
|
|
||||||
ARG VERSION
|
RUN --mount=type=cache,target=/root/.cache/pip \
|
||||||
ENV VERSION=$VERSION
|
set -ex \
|
||||||
|
&& pip config set global.index-url ${PIP_MIRROR} \
|
||||||
|
&& pip install --upgrade pip \
|
||||||
|
&& pip install --upgrade setuptools wheel \
|
||||||
|
&& pip install $(grep -E 'jms|jumpserver' requirements/requirements.txt) -i ${PIP_JMS_MIRROR} \
|
||||||
|
&& pip install -r requirements/requirements.txt
|
||||||
|
|
||||||
ADD . .
|
COPY --from=stage-build /opt/jumpserver/release/jumpserver /opt/jumpserver
|
||||||
RUN cd utils \
|
RUN echo > /opt/jumpserver/config.yml \
|
||||||
&& bash -ixeu build.sh \
|
&& rm -rf /tmp/build
|
||||||
&& mv ../release/jumpserver /opt/jumpserver \
|
|
||||||
&& rm -rf /tmp/build \
|
|
||||||
&& echo > /opt/jumpserver/config.yml
|
|
||||||
|
|
||||||
WORKDIR /opt/jumpserver
|
WORKDIR /opt/jumpserver
|
||||||
VOLUME /opt/jumpserver/data
|
VOLUME /opt/jumpserver/data
|
||||||
|
|
|
@ -11,6 +11,9 @@ action="${1-start}"
|
||||||
service="${2-all}"
|
service="${2-all}"
|
||||||
|
|
||||||
trap cleanup EXIT
|
trap cleanup EXIT
|
||||||
|
|
||||||
|
rm -f /opt/jumpserver/tmp/*.pid
|
||||||
|
|
||||||
if [[ "$action" == "bash" || "$action" == "sh" ]];then
|
if [[ "$action" == "bash" || "$action" == "sh" ]];then
|
||||||
bash
|
bash
|
||||||
elif [[ "$action" == "sleep" ]];then
|
elif [[ "$action" == "sleep" ]];then
|
||||||
|
@ -19,4 +22,3 @@ elif [[ "$action" == "sleep" ]];then
|
||||||
else
|
else
|
||||||
python jms "${action}" "${service}"
|
python jms "${action}" "${service}"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue