# ===== 构建阶段 ===== # 使用Maven镜像进行构建 FROM maven:3.8.4-openjdk-8-slim AS builder # 设置工作目录 WORKDIR /build # 复制settings.xml和pom.xml文件 COPY settings.xml /root/.m2/ COPY pom.xml . # 设置Maven仓库权限 RUN mkdir -p /root/.m2/repository && \ chown -R root:root /root/.m2 # 下载依赖(利用Docker缓存层和国内镜像) RUN mvn dependency:go-offline -B -s /root/.m2/settings.xml # 复制源代码 COPY src ./src # 构建应用(使用国内镜像加速) RUN mvn clean package -DskipTests -B -s /root/.m2/settings.xml # ===== 运行阶段 ===== # 使用OpenJDK 8作为基础镜像 FROM openjdk:8-jre-alpine AS runtime # 设置工作目录 WORKDIR /app # 设置维护者信息 LABEL maintainer="digital-archive-team" # 清理包缓存并更新索引 RUN rm -rf /var/cache/apk/* && \ apk update --no-cache && \ apk upgrade --no-cache # 安装基础必需包(分步骤确保稳定性) RUN apk add --no-cache ca-certificates RUN apk add --no-cache curl RUN apk add --no-cache bash RUN apk add --no-cache tini # 清理缓存 RUN rm -rf /var/cache/apk/* # 尝试安装Tesseract OCR(完全可选,失败不影响构建) RUN apk add --no-cache tesseract tesseract-ocr 2>/dev/null || \ (echo "Tesseract installation failed - using OCR service fallback" && true) # 尝试安装中文语言包 RUN apk add --no-cache tesseract-data-chi_sim tesseract-data-chi_tra 2>/dev/null || \ (echo "Chinese language packs installation failed" && true) # 尝试安装英文语言包 RUN apk add --no-cache tesseract-data-eng 2>/dev/null || \ (echo "English language pack installation failed" && true) # 最终清理 RUN rm -rf /var/cache/apk/* /tmp/* /var/tmp/* # 验证关键组件 RUN curl --version && echo "✓ Core components verified" # 设置环境变量 ENV JAVA_OPTS="-Xmx2g -Xms1g -XX:+UseG1GC -XX:MaxGCPauseMillis=200" ENV SPRING_PROFILES_ACTIVE=prod # 创建应用用户和目录 RUN addgroup -g 1001 app \ && adduser -D -s /bin/sh -u 1001 -G app app \ && mkdir -p /app/data/upload \ && mkdir -p /app/data/temp \ && mkdir -p /app/data/unzip \ && mkdir -p /app/data/images \ && mkdir -p /app/data/reports \ && mkdir -p /app/data/elasticsearch \ && mkdir -p /app/logs \ && chown -R app:app /app # 设置工作目录 WORKDIR /app # 从构建阶段复制jar文件 COPY --from=builder /build/target/point-strategy-*.jar app.jar # 复制配置文件(如果需要覆盖默认配置) # COPY application-prod.yml application-prod.yml # 切换到非root用户 USER app # 健康检查 HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \ CMD curl -f http://localhost:9081/point-strategy/actuator/health || exit 1 # 暴露端口 EXPOSE 9081 # 使用tini作为init进程 ENTRYPOINT ["/sbin/tini", "--"] # 启动应用 CMD ["sh", "-c", "java $JAVA_OPTS -jar app.jar"]