From 5ca0e6d83a7446b02dd38885a529fefbe9ff11e4 Mon Sep 17 00:00:00 2001 From: "Logan.Li" Date: Fri, 26 Jun 2026 19:12:38 +0800 Subject: [PATCH] =?UTF-8?q?fix(docker):=20Alpine=20apk=20=E9=95=9C?= =?UTF-8?q?=E5=83=8F=E6=BA=90=20403=20=E6=97=B6=E8=87=AA=E5=8A=A8=E5=9B=9E?= =?UTF-8?q?=E9=80=80=E9=98=BF=E9=87=8C=E4=BA=91/=E5=AE=98=E6=96=B9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 新增 scripts/setup-alpine-mirrors.sh 探测可用镜像 - 移除硬编码清华源，runtime 固定 alpine:3.20 避免 latest 漂移 --- Dockerfile.embed | 20 +++++++++--------- backend/Dockerfile | 23 +++++++++------------ scripts/setup-alpine-mirrors.sh | 36 +++++++++++++++++++++++++++++++++ 3 files changed, 54 insertions(+), 25 deletions(-) create mode 100755 scripts/setup-alpine-mirrors.sh diff --git a/Dockerfile.embed b/Dockerfile.embed index 9c4ba2e..f357add 100644 --- a/Dockerfile.embed +++ b/Dockerfile.embed @@ -38,9 +38,10 @@ ARG TARGETARCH WORKDIR /app -# 使用国内 Alpine 镜像源加速 -RUN sed -i 's|dl-cdn.alpinelinux.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apk/repositories -RUN apk add --no-cache git ca-certificates tzdata gcc musl-dev +# Alpine 镜像源探测（清华 403 时自动回退阿里云/官方）// Logan.Li +COPY scripts/setup-alpine-mirrors.sh /tmp/setup-alpine-mirrors.sh +RUN chmod +x /tmp/setup-alpine-mirrors.sh && /tmp/setup-alpine-mirrors.sh && \ + apk add --no-cache git ca-certificates tzdata gcc musl-dev ENV TZ=Asia/Shanghai ENV GOPROXY=https://goproxy.cn,direct @@ -83,24 +84,21 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X main.vers CGO_ENABLED=0 GOOS=darwin GOARCH=arm64 go build -ldflags="-s -w -X main.version=${VERSION} -X main.buildTime=${BUILD_TIME}" -o bin/aiops-agent-darwin-arm64 . # ==================== Stage 4: Runtime ==================== -FROM alpine:latest +FROM alpine:3.20 ARG TARGETARCH ARG KUBECTL_VERSION=v1.32.2 -# 使用国内 Alpine 镜像源加速 -RUN sed -i 's|dl-cdn.alpinelinux.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apk/repositories - # 安装运行时依赖（核心最小集，重型工具改为懒加载）// Logan.Li # bash=kubectl交互终端, curl=健康检查, git=流水线代码拉取, docker-cli=镜像构建推送 # kubectl 按 TARGETARCH 构建时下载（linux/amd64|arm64），无需本地 backend/kubectl // Logan.Li -RUN apk --no-cache add ca-certificates tzdata bash curl git docker-cli docker-cli-buildx - -COPY scripts/install-kubectl.sh /tmp/install-kubectl.sh +COPY scripts/setup-alpine-mirrors.sh scripts/install-kubectl.sh /tmp/ +RUN chmod +x /tmp/setup-alpine-mirrors.sh && /tmp/setup-alpine-mirrors.sh && \ + apk --no-cache add ca-certificates tzdata bash curl git docker-cli docker-cli-buildx RUN chmod +x /tmp/install-kubectl.sh && \ TARGET_OS=linux TARGET_ARCH="${TARGETARCH}" KUBECTL_VERSION="${KUBECTL_VERSION}" \ /tmp/install-kubectl.sh /usr/local/bin/kubectl && \ - rm -f /tmp/install-kubectl.sh + rm -f /tmp/setup-alpine-mirrors.sh /tmp/install-kubectl.sh # Maven 阿里云镜像加速（maven 懒加载后生效） RUN mkdir -p /root/.m2 && \ diff --git a/backend/Dockerfile b/backend/Dockerfile index e1a868c..8fc6217 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -17,9 +17,10 @@ FROM golang:1.24-alpine AS builder WORKDIR /app -# 使用国内 Alpine 镜像源加速 // Logan.Li -RUN sed -i 's|dl-cdn.alpinelinux.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apk/repositories -RUN apk add --no-cache git ca-certificates tzdata +# Alpine 镜像源探测（清华 403 时自动回退）// Logan.Li +COPY scripts/setup-alpine-mirrors.sh /tmp/setup-alpine-mirrors.sh +RUN chmod +x /tmp/setup-alpine-mirrors.sh && /tmp/setup-alpine-mirrors.sh && \ + apk add --no-cache git ca-certificates tzdata ENV TZ=Asia/Shanghai ENV GOPROXY=https://goproxy.cn,direct @@ -80,20 +81,14 @@ FROM alpine:3.20 ARG TARGETARCH ARG KUBECTL_VERSION=v1.32.2 -# 使用国内 Alpine 镜像源加速 // Logan.Li -RUN sed -i 's|dl-cdn.alpinelinux.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apk/repositories - # 安装运行时依赖（核心最小集，重型工具改为懒加载）// Logan.Li -# bash=kubectl交互终端, curl=健康检查, git=流水线代码拉取, docker-cli=镜像构建推送 -# kubectl 按 TARGETARCH 下载（linux/amd64|arm64）// Logan.Li -RUN --mount=type=cache,target=/var/cache/apk \ - apk add ca-certificates tzdata bash curl git docker-cli docker-cli-buildx - -COPY scripts/install-kubectl.sh /tmp/install-kubectl.sh -RUN chmod +x /tmp/install-kubectl.sh && \ +COPY scripts/setup-alpine-mirrors.sh scripts/install-kubectl.sh /tmp/ +RUN chmod +x /tmp/setup-alpine-mirrors.sh && /tmp/setup-alpine-mirrors.sh && \ + apk add --no-cache ca-certificates tzdata bash curl git docker-cli docker-cli-buildx && \ + chmod +x /tmp/install-kubectl.sh && \ TARGET_OS=linux TARGET_ARCH="${TARGETARCH}" KUBECTL_VERSION="${KUBECTL_VERSION}" \ /tmp/install-kubectl.sh /usr/local/bin/kubectl && \ - rm -f /tmp/install-kubectl.sh + rm -f /tmp/setup-alpine-mirrors.sh /tmp/install-kubectl.sh # npm 淘宝镜像加速（node 懒加载后生效） RUN npm config set registry https://registry.npmmirror.com 2>/dev/null || true diff --git a/scripts/setup-alpine-mirrors.sh b/scripts/setup-alpine-mirrors.sh new file mode 100755 index 0000000..ce2a074 --- /dev/null +++ b/scripts/setup-alpine-mirrors.sh @@ -0,0 +1,36 @@ +#!/bin/sh +# Alpine apk 镜像源：按序探测可用镜像，避免单点 403 // Logan.Li +set -eu + +ALPINE_VER=$(cut -d. -f1,2 /etc/alpine-release) +ARCH=$(apk --print-arch 2>/dev/null || echo "x86_64") + +probe() { + local host=$1 + local url="https://${host}/alpine/v${ALPINE_VER}/main/${ARCH}/APKINDEX.tar.gz" + if wget -q --spider "$url" 2>/dev/null; then + return 0 + fi + if curl -fsSI --connect-timeout 8 "$url" >/dev/null 2>&1; then + return 0 + fi + return 1 +} + +write_repos() { + local host=$1 + printf 'https://%s/alpine/v%s/main\nhttps://%s/alpine/v%s/community\n' \ + "$host" "$ALPINE_VER" "$host" "$ALPINE_VER" > /etc/apk/repositories +} + +for host in mirrors.aliyun.com mirrors.cloud.tencent.com mirrors.ustc.edu.cn dl-cdn.alpinelinux.org; do + if probe "$host"; then + write_repos "$host" + echo "[apk-mirror] alpine v${ALPINE_VER} ${ARCH} -> ${host}" + exit 0 + fi + echo "[apk-mirror] skip ${host} (unreachable)" >&2 +done + +echo "[apk-mirror] no mirror available for alpine v${ALPINE_VER}" >&2 +exit 1 \ No newline at end of file