mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-10-30 08:36:55 +09:00
Juan DenisandClaude Opus 4.8
ca354e228a
The vite 8 upgrade (dcf05d1) makes the frontend build require Node ^20.19.0 ||
>=22.12.0 — on anything older npm silently skips rolldown's native binary and
`npm run build` dies with a cryptic MODULE_NOT_FOUND. Servers that build the SPA
on-box (source install + every update) would break their next update. So:
- install.sh node_ready() now gates on the real vite 8 floor (was Node >=18) and
provisions NodeSource 22 LTS when the host Node is too old.
- update.sh gains _node_build_ok(): build_frontend_bundle refuses (returns 1 →
caller rolls back) and the Docker-host rebuild halts, both with an actionable
"upgrade Node" message instead of a rolldown stack trace.
- Dockerfile + CI (release, release-smoke, extensions, scripts-nightly) bumped
node 20 -> 22 so the shipped/pre-built bundle is built on a compatible Node.
Also fixes a pre-existing parity bug the operator caught: update.sh rendered the
systemd unit WITHOUT substituting @BIND_HOST@ (install.sh does), so an update
left the literal placeholder and gunicorn would fail to bind. update.sh now
substitutes it (loopback default, SERVERKIT_BIND_HOST override) like install.sh.
Tests: test_update.sh +3 (node-floor gate, build refusal on old Node,
@BIND_HOST@ substitution) — 48 passed / 0 failed.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
113 lines
3.6 KiB
Docker
113 lines
3.6 KiB
Docker
# ============================================
|
|
# ServerKit Dockerfile - Single Container
|
|
# ============================================
|
|
# This Dockerfile creates a single container with both
|
|
# frontend and backend. Good for simple deployments.
|
|
#
|
|
# For production with separate containers and nginx,
|
|
# use docker-compose.yml instead.
|
|
#
|
|
# Build: docker build -t serverkit .
|
|
# Run: docker run -d -p 5000:5000 --env-file .env serverkit
|
|
# Override the internal backend port with SERVERKIT_BACKEND_PORT if needed.
|
|
# ============================================
|
|
|
|
# Stage 1: Build Frontend
|
|
# --platform=$BUILDPLATFORM: dist/ is static JS/CSS (arch-independent), so this
|
|
# stage always runs natively on the build machine — never under QEMU, where an
|
|
# emulated `npm ci` takes 20-40 min (or hangs) during multi-arch release builds.
|
|
FROM --platform=$BUILDPLATFORM node:22-alpine AS frontend-builder
|
|
|
|
WORKDIR /app/frontend
|
|
|
|
# Copy package files
|
|
COPY frontend/package*.json ./
|
|
|
|
# Install dependencies
|
|
RUN npm ci
|
|
|
|
# Copy frontend source
|
|
COPY frontend/ ./
|
|
|
|
# Build production bundle
|
|
RUN npm run build
|
|
|
|
# ============================================
|
|
# Stage 2: Production Image
|
|
FROM python:3.11-slim-bookworm
|
|
|
|
# Set environment variables
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
FLASK_ENV=production \
|
|
SERVERKIT_BACKEND_PORT=5000
|
|
|
|
# Install system dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
# Required for psutil and some Python packages
|
|
gcc \
|
|
python3-dev \
|
|
# Required for gevent
|
|
libevent-dev \
|
|
# Required for cryptography
|
|
libffi-dev \
|
|
libssl-dev \
|
|
# ClamAV for malware scanning (optional, can be installed separately)
|
|
clamav \
|
|
clamav-daemon \
|
|
clamav-freshclam \
|
|
# Useful utilities
|
|
curl \
|
|
procps \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& apt-get clean
|
|
|
|
# Create non-root user for security
|
|
RUN groupadd -r serverkit && useradd -r -g serverkit serverkit
|
|
|
|
# Create necessary directories
|
|
RUN mkdir -p /etc/serverkit /var/serverkit/apps /var/log/serverkit /var/quarantine /var/backups/serverkit \
|
|
&& chown -R serverkit:serverkit /etc/serverkit /var/serverkit /var/log/serverkit /var/quarantine /var/backups/serverkit
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy backend requirements and install Python dependencies
|
|
COPY backend/requirements.txt ./backend/
|
|
RUN pip install --no-cache-dir -r backend/requirements.txt
|
|
|
|
# Copy backend source
|
|
COPY backend/ ./backend/
|
|
|
|
# Ship the VERSION file next to the backend tree (/app/VERSION) so the panel
|
|
# reports its real version in containers instead of the unknown-version fallback
|
|
COPY VERSION ./VERSION
|
|
|
|
# Copy built frontend from Stage 1
|
|
COPY --from=frontend-builder /app/frontend/dist ./frontend/dist
|
|
|
|
# Create data directory for SQLite database
|
|
RUN mkdir -p /app/data && chown -R serverkit:serverkit /app/data
|
|
|
|
# Set ownership
|
|
RUN chown -R serverkit:serverkit /app
|
|
|
|
# Switch to non-root user
|
|
USER serverkit
|
|
|
|
# Expose port
|
|
EXPOSE 5000
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
CMD curl -f "http://localhost:${SERVERKIT_BACKEND_PORT:-5000}/api/v1/system/health" || exit 1
|
|
|
|
# Working directory for the backend
|
|
WORKDIR /app/backend
|
|
|
|
# Default command - use gunicorn for production
|
|
# Single process (agent gateway state is in-memory) + threads: the app runs
|
|
# async_mode='threading' (simple-websocket serves WS); a gevent-websocket
|
|
# worker would double-answer the upgrade handshake and break WebSocket.
|
|
CMD ["sh", "-c", "exec gunicorn --workers 1 --threads 100 --bind 0.0.0.0:${SERVERKIT_BACKEND_PORT:-5000} --timeout 120 --access-logfile - --error-logfile - run:app"]
|