Logan.Li
59320aa410
CPU 根因：每个 Agent 请求都做一次 bcrypt 校验（实测 72ms）， 30 台主机 18 req/s × 72ms ≈ 1.35 核，实测容器 CPU 135%。 - agentauth: 校验结果按 Token 哈希缓存（TTL 5min，轮换即失效）， last_used_at 写入按 60s 节流。实测 CPU 135% → 1.6%，请求延迟 103ms → 1.6ms - metricagg: 新增后台逐级降采样聚合 raw→1m/5m→1h→6h/1d，取代前端手动触发 - metrics_aggregate: 补 uniq_metric_agg 唯一索引（原 idx_agg 非唯一导致 upsert 插重复行） - agent 合并配置接口 GET /agent/config：一次返回任务+探针+端口策略+频率， 配置轮询 5s→30s；服务端可下发 report_interval，Agent 热更新 ticker 无需重装 - retention: agent_reports 保留期 7d→1d（趋势由聚合表承担） - redis: 增加 maxmemory 512mb + volatile-lru - fix(upgrade): 升级脚本改为 fail-fast，修复下载失败仍报 UPGRADE_OK 的静默谎报 // Logan.Li
128 lines
5.0 KiB
Docker
128 lines
5.0 KiB
Docker
# syntax=docker/dockerfile:1
|
|
# ============================================================
|
|
# AIOps Backend + Agent 多阶段 Dockerfile (BuildKit 加速版)
|
|
# Stage 1: 编译后端 (Go 1.24)
|
|
# Stage 2: 交叉编译 Agent (Go 1.24, linux-amd64/arm64 + darwin-arm64)
|
|
# Stage 3: 运行时 (Alpine 3.20 固定版本)
|
|
# 署名 Logan.Li
|
|
# ============================================================
|
|
|
|
# 构建参数 — 版本号通过 git tag 或环境变量注入
|
|
ARG VERSION=dev
|
|
ARG BUILD_TIME=unknown
|
|
ARG KUBECTL_VERSION=v1.32.2
|
|
|
|
# ==================== Stage 1: Backend Builder ====================
|
|
FROM golang:1.24-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Alpine 镜像源探测（清华 403 时自动回退）// Logan.Li
|
|
COPY scripts/setup-alpine-mirrors.sh /tmp/setup-alpine-mirrors.sh
|
|
RUN chmod +x /tmp/setup-alpine-mirrors.sh && /tmp/setup-alpine-mirrors.sh && \
|
|
apk add --no-cache git ca-certificates tzdata
|
|
|
|
ENV TZ=Asia/Shanghai
|
|
ENV GOPROXY=https://goproxy.cn,direct
|
|
ENV GONOSUMCHECK=*
|
|
ENV GOMODCACHE=/go/pkg/mod
|
|
ENV GOCACHE=/root/.cache/go-build
|
|
|
|
# 复制后端 go.mod（利用 Docker 层缓存）
|
|
COPY backend/go.mod backend/go.sum ./
|
|
# --mount=type=cache 让 go mod download 的结果跨构建复用 // Logan.Li
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
go mod download
|
|
|
|
# 复制后端源码
|
|
COPY backend/ ./
|
|
|
|
# 构建后端二进制（注入版本号）— cache mount 让增量编译极快
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
|
|
-ldflags="-w -s -X main.Version=${VERSION} -X main.BuildTime=${BUILD_TIME}" \
|
|
-o aiops .
|
|
|
|
# ==================== Stage 2: Agent Builder ====================
|
|
FROM golang:1.24-alpine AS agent-builder
|
|
|
|
ARG VERSION
|
|
ARG BUILD_TIME
|
|
|
|
WORKDIR /agent
|
|
|
|
ENV GOPROXY=https://goproxy.cn,direct
|
|
ENV GOSUMDB=off
|
|
ENV GOMODCACHE=/go/pkg/mod
|
|
ENV GOCACHE=/root/.cache/go-build
|
|
|
|
# 复制 agent go.mod
|
|
COPY agent/go.mod agent/go.sum ./
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
go mod download
|
|
|
|
# 复制 agent 源码
|
|
COPY agent/ ./
|
|
|
|
# 交叉编译主流服务器平台 agent 二进制（Linux amd64 / Linux arm64 / Windows amd64，注入版本号）
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X main.version=${VERSION} -X main.buildTime=${BUILD_TIME}" -o bin/aiops-agent-linux-amd64 . && \
|
|
CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags="-s -w -X main.version=${VERSION} -X main.buildTime=${BUILD_TIME}" -o bin/aiops-agent-linux-arm64 . && \
|
|
CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -ldflags="-s -w -X main.version=${VERSION} -X main.buildTime=${BUILD_TIME}" -o bin/aiops-agent-windows-amd64.exe .
|
|
|
|
# ==================== Stage 3: Runtime ====================
|
|
# 固定版本避免 :latest 每次变动导致全量 cache 失效 // Logan.Li
|
|
FROM alpine:3.20
|
|
|
|
ARG TARGETARCH
|
|
ARG KUBECTL_VERSION=v1.32.2
|
|
|
|
# 安装运行时依赖（U4 镜像瘦身 — 核心最小集, git/docker-cli 改为懒加载）// Logan.Li
|
|
COPY scripts/setup-alpine-mirrors.sh scripts/install-kubectl.sh /tmp/
|
|
RUN chmod +x /tmp/setup-alpine-mirrors.sh && /tmp/setup-alpine-mirrors.sh && \
|
|
apk add --no-cache ca-certificates tzdata bash curl && \
|
|
chmod +x /tmp/install-kubectl.sh && \
|
|
TARGET_OS=linux TARGET_ARCH="${TARGETARCH}" KUBECTL_VERSION="${KUBECTL_VERSION}" \
|
|
/tmp/install-kubectl.sh /usr/local/bin/kubectl && \
|
|
rm -f /tmp/setup-alpine-mirrors.sh /tmp/install-kubectl.sh
|
|
|
|
# npm 淘宝镜像加速（node 懒加载后生效）
|
|
RUN npm config set registry https://registry.npmmirror.com 2>/dev/null || true
|
|
# Maven 阿里云镜像加速（maven 懒加载后生效）
|
|
RUN mkdir -p /root/.m2 && \
|
|
echo '<?xml version="1.0" encoding="UTF-8"?><settings><mirrors><mirror><id>aliyun</id><mirrorOf>central</mirrorOf><name>Aliyun Maven</name><url>https://maven.aliyun.com/repository/public</url></mirror></mirrors></settings>' > /root/.m2/settings.xml
|
|
|
|
ENV TZ=Asia/Shanghai
|
|
|
|
WORKDIR /app
|
|
|
|
# 复制后端二进制
|
|
COPY --from=builder /app/aiops .
|
|
|
|
# 创建运行时目录（agent 二进制 + 安装脚本）
|
|
RUN mkdir -p /app/agent/bin /app/agent/deploy
|
|
|
|
# 复制 agent 二进制（Linux amd64 内置，其余平台通过下载 API 提供）// Logan.Li
|
|
COPY --from=agent-builder /agent/bin/aiops-agent-linux-amd64 /app/agent/bin/
|
|
COPY --from=agent-builder /agent/bin/aiops-agent-linux-arm64 /app/agent/bin/
|
|
COPY --from=agent-builder /agent/bin/aiops-agent-windows-amd64.exe /app/agent/bin/
|
|
|
|
# 复制 agent 安装脚本和 systemd service 模板
|
|
COPY agent/deploy/install.sh /app/agent/deploy/
|
|
COPY agent/deploy/aiops-agent.service /app/agent/deploy/
|
|
|
|
# 启动脚本（注入 hosts DNS 缓存）
|
|
COPY backend/entrypoint.sh /app/
|
|
RUN chmod +x /app/entrypoint.sh
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
|
|
CMD curl -f http://localhost:8080/health || exit 1
|
|
|
|
CMD ["./entrypoint.sh"]
|