jxdn123 commited on
Commit
14cd211
·
verified ·
1 Parent(s): b915662

Update Dockerfile

Browse files
Files changed (1) hide show
  1. Dockerfile +23 -15
Dockerfile CHANGED
@@ -45,18 +45,26 @@ RUN go build -trimpath -ldflags "-s -w -X gpt-load/internal/version.Version=${VE
45
  # ---------- 3) 运行阶段 ----------
46
  FROM alpine:3.20
47
 
48
- RUN addgroup -S app && adduser -S app -G app
49
- WORKDIR /app
50
- -RUN apk add --no-cache ca-certificates tzdata socat && update-ca-certificates
51
- +RUN apk add --no-cache ca-certificates tzdata socat && update-ca-certificates
52
-
53
- COPY --from=go-builder /build/gpt-load /app/gpt-load
54
- +## 关键:为非 root 账户准备可写目录
55
- +RUN mkdir -p /app/data && chown -R app:app /app
56
-
57
- COPY ./run.sh /app/run.sh
58
- RUN chmod +x /app/run.sh
59
- @@
60
- -USER app
61
- +USER app
62
- ENTRYPOINT ["/app/run.sh"]
 
 
 
 
 
 
 
 
 
45
  # ---------- 3) 运行阶段 ----------
46
  FROM alpine:3.20
47
 
48
+ # root 用户
49
+ RUN addgroup -S app && adduser -S app -G app
50
+
51
+ WORKDIR /app
52
+ # 仅安装必须品;socat 用于把 $PORT 转发到 3001(若程序未适配 $PORT)
53
+ RUN apk add --no-cache ca-certificates tzdata socat && update-ca-certificates
54
+
55
+ # 拷入二进制
56
+ COPY --from=go-builder /build/gpt-load /app/gpt-load
57
+
58
+ # 为非 root 账户准备可写目录(SQLite 数据默认在 /app/data)
59
+ RUN mkdir -p /app/data && chown -R app:app /app
60
+
61
+ # 启动脚本
62
+ COPY ./run.sh /app/run.sh
63
+ RUN chmod +x /app/run.sh
64
+
65
+ # HF 通常注入 PORT=7860;默认值兜底
66
+ ENV PORT=7860
67
+ EXPOSE 7860
68
+
69
+ USER app
70
+ ENTRYPOINT ["/app/run.sh"]