mirror of https://github.com/jumpserver/jumpserver
吴小白
8 months ago
committed by
Bryan
6 changed files with 537 additions and 1814 deletions
@ -1,5 +1,134 @@
|
||||
ARG VERSION |
||||
FROM registry.fit2cloud.com/jumpserver/xpack:${VERSION} as build-xpack |
||||
FROM registry.fit2cloud.com/jumpserver/core-ce:${VERSION} |
||||
|
||||
FROM python:3.11-slim-bullseye as stage-1 |
||||
ARG TARGETARCH |
||||
|
||||
ARG DEPENDENCIES=" \ |
||||
ca-certificates \ |
||||
wget" |
||||
|
||||
RUN set -ex \ |
||||
&& apt-get update \ |
||||
&& apt-get -y install --no-install-recommends ${DEPENDENCIES} \ |
||||
&& echo "no" | dpkg-reconfigure dash \ |
||||
&& apt-get clean all \ |
||||
&& rm -rf /var/lib/apt/lists/* |
||||
|
||||
WORKDIR /opt |
||||
|
||||
ARG CHECK_VERSION=v1.0.2 |
||||
RUN set -ex \ |
||||
&& wget https://github.com/jumpserver-dev/healthcheck/releases/download/${CHECK_VERSION}/check-${CHECK_VERSION}-linux-${TARGETARCH}.tar.gz \ |
||||
&& tar -xf check-${CHECK_VERSION}-linux-${TARGETARCH}.tar.gz \ |
||||
&& mv check /usr/local/bin/ \ |
||||
&& chown root:root /usr/local/bin/check \ |
||||
&& chmod 755 /usr/local/bin/check \ |
||||
&& rm -f check-${CHECK_VERSION}-linux-${TARGETARCH}.tar.gz |
||||
|
||||
ARG VERSION |
||||
ENV VERSION=$VERSION |
||||
|
||||
WORKDIR /opt/jumpserver |
||||
|
||||
ADD . . |
||||
COPY --from=build-xpack /opt/xpack /opt/jumpserver/apps/xpack |
||||
|
||||
RUN echo > /opt/jumpserver/config.yml \ |
||||
&& cd utils && bash -ixeu build.sh |
||||
|
||||
FROM python:3.11-slim-bullseye as stage-2 |
||||
ARG TARGETARCH |
||||
|
||||
ARG BUILD_DEPENDENCIES=" \ |
||||
g++ \ |
||||
pkg-config" |
||||
|
||||
ARG DEPENDENCIES=" \ |
||||
default-libmysqlclient-dev \ |
||||
default-mysql-client \ |
||||
libldap2-dev \ |
||||
libsasl2-dev \ |
||||
libxml2-dev \ |
||||
libxmlsec1-dev \ |
||||
libxmlsec1-openssl" |
||||
|
||||
ARG APT_MIRROR=http://mirrors.ustc.edu.cn |
||||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=core-apt \ |
||||
--mount=type=cache,target=/var/lib/apt,sharing=locked,id=core-apt \ |
||||
sed -i "s@http://.*.debian.org@${APT_MIRROR}@g" /etc/apt/sources.list \ |
||||
&& rm -f /etc/apt/apt.conf.d/docker-clean \ |
||||
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \ |
||||
&& apt-get update \ |
||||
&& apt-get -y install --no-install-recommends ${BUILD_DEPENDENCIES} \ |
||||
&& apt-get -y install --no-install-recommends ${DEPENDENCIES} \ |
||||
&& echo "no" | dpkg-reconfigure dash |
||||
|
||||
WORKDIR /opt/jumpserver |
||||
|
||||
ARG PIP_MIRROR=https://pypi.tuna.tsinghua.edu.cn/simple |
||||
RUN --mount=type=cache,target=/root/.cache \ |
||||
--mount=type=bind,source=poetry.lock,target=/opt/jumpserver/poetry.lock \ |
||||
--mount=type=bind,source=pyproject.toml,target=/opt/jumpserver/pyproject.toml \ |
||||
set -ex \ |
||||
&& python3 -m venv /opt/py3 \ |
||||
&& pip install poetry -i ${PIP_MIRROR} \ |
||||
&& poetry config virtualenvs.create false \ |
||||
&& . /opt/py3/bin/activate \ |
||||
&& poetry install |
||||
|
||||
FROM python:3.11-slim-bullseye |
||||
ARG TARGETARCH |
||||
ENV LANG=zh_CN.UTF-8 \ |
||||
PATH=/opt/py3/bin:$PATH |
||||
|
||||
ARG DEPENDENCIES=" \ |
||||
libldap2-dev \ |
||||
libx11-dev \ |
||||
libxmlsec1-openssl" |
||||
|
||||
ARG TOOLS=" \ |
||||
ca-certificates \ |
||||
curl \ |
||||
default-libmysqlclient-dev \ |
||||
default-mysql-client \ |
||||
iputils-ping \ |
||||
locales \ |
||||
nmap \ |
||||
openssh-client \ |
||||
patch \ |
||||
sshpass \ |
||||
telnet \ |
||||
vim \ |
||||
wget" |
||||
|
||||
ARG APT_MIRROR=http://mirrors.ustc.edu.cn |
||||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=core-apt \ |
||||
--mount=type=cache,target=/var/lib/apt,sharing=locked,id=core-apt \ |
||||
sed -i "s@http://.*.debian.org@${APT_MIRROR}@g" /etc/apt/sources.list \ |
||||
&& rm -f /etc/apt/apt.conf.d/docker-clean \ |
||||
&& ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \ |
||||
&& apt-get update \ |
||||
&& apt-get -y install --no-install-recommends ${DEPENDENCIES} \ |
||||
&& apt-get -y install --no-install-recommends ${TOOLS} \ |
||||
&& mkdir -p /root/.ssh/ \ |
||||
&& echo "Host *\n\tStrictHostKeyChecking no\n\tUserKnownHostsFile /dev/null\n\tCiphers +aes128-cbc\n\tKexAlgorithms +diffie-hellman-group1-sha1\n\tHostKeyAlgorithms +ssh-rsa" > /root/.ssh/config \ |
||||
&& echo "no" | dpkg-reconfigure dash \ |
||||
&& echo "zh_CN.UTF-8" | dpkg-reconfigure locales \ |
||||
&& sed -i "s@# export @export @g" ~/.bashrc \ |
||||
&& sed -i "s@# alias @alias @g" ~/.bashrc |
||||
|
||||
COPY --from=stage-2 /opt/py3 /opt/py3 |
||||
COPY --from=stage-1 /usr/local/bin /usr/local/bin |
||||
COPY --from=stage-1 /opt/jumpserver/release/jumpserver /opt/jumpserver |
||||
|
||||
WORKDIR /opt/jumpserver |
||||
|
||||
ARG VERSION |
||||
ENV VERSION=$VERSION |
||||
|
||||
VOLUME /opt/jumpserver/data |
||||
|
||||
EXPOSE 8080 |
||||
|
||||
ENTRYPOINT ["./entrypoint.sh"] |
||||
|
||||
@ -0,0 +1,14 @@
|
||||
#!/bin/bash |
||||
|
||||
command -v poetry >/dev/null 2>&1 || { |
||||
echo "poetry not found. Aborting." |
||||
exit 1 |
||||
} |
||||
|
||||
if [ ! -f "pyproject.toml" ]; then |
||||
echo "pyproject.toml not found. Aborting." |
||||
exit 1 |
||||
fi |
||||
|
||||
poetry config virtualenvs.create false |
||||
poetry lock --no-update |
||||
Loading…
Reference in new issue